
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/42945c9b-0a8f-37a0-baeb-80f5c72e4242.roa
File: 42945c9b-0a8f-37a0-baeb-80f5c72e4242.roa (raw, json)
Hash identifier: skRX9b6IIM2FxrtaU/fVl04C/MLuhCdze40gsnUKmM8=
Subject key identifier: 35:0A:F1:CF:94:F9:CD:F0:56:91:F8:04:BA:A2:BE:AE:59:7D:5D:0C
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584D24DFA1DF0ED2F12C3899BE00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/42945c9b-0a8f-37a0-baeb-80f5c72e4242.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 2734
IP address blocks: 2605:6c00:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:a1:df:0e:d2:f1:2c:38:99:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=4e99f4e5-9e0e-4553-bd2e-7ff8a94dfb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:a3:3e:44:ea:c7:bb:f3:0c:fe:94:1a:29:
97:e9:c4:b0:84:c4:48:6c:4a:bd:8a:0f:03:2c:0b:
19:77:34:f2:96:30:2e:3f:69:08:be:07:c9:38:31:
61:fd:ca:a1:f7:58:13:fa:d6:48:f7:53:c4:b9:c6:
33:66:d9:38:1a:e7:75:1e:e6:58:cc:c3:e3:ab:67:
dc:33:85:0f:d2:08:8a:f0:fe:08:48:b4:92:b1:3d:
b6:08:cf:08:eb:2b:de:c3:72:1c:af:49:5d:04:8b:
24:5c:ef:9a:c7:09:ab:24:84:cf:52:14:33:2b:92:
29:4a:46:00:c9:68:27:da:29:6f:de:7f:f7:46:fd:
4c:59:47:44:89:7d:af:9f:b3:27:7d:65:4b:d1:ef:
c0:52:44:15:b7:c0:71:17:13:17:a0:34:cd:a3:71:
3b:7c:21:bd:3f:f9:83:e7:df:e2:87:83:34:84:7a:
a0:b0:92:6b:b8:71:59:49:84:4d:a7:c9:8e:8f:b8:
d0:f3:c7:a8:45:0f:2d:48:ca:12:34:13:20:73:f7:
04:e1:a6:2f:1b:69:2a:49:fe:c9:6f:db:c3:07:c3:
23:07:6b:f0:fa:45:21:ec:a5:db:d8:ca:b7:dd:dc:
d9:b3:11:0c:10:07:8d:2b:ee:3e:b3:9a:04:81:df:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:F1:CF:94:F9:CD:F0:56:91:F8:04:BA:A2:BE:AE:59:7D:5D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/42945c9b-0a8f-37a0-baeb-80f5c72e4242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6c00:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c0:7e:52:b2:72:2d:b7:3e:98:31:5b:09:f7:c7:db:55:dc:
af:82:be:0d:46:58:3c:c2:c3:c7:2a:27:c8:27:46:2e:44:ec:
44:bd:00:43:10:c1:65:00:23:a1:fd:33:8b:f9:ff:7c:fc:7d:
33:6b:a2:28:62:04:1c:3d:9a:91:a1:f3:d4:02:6f:ec:ea:0c:
d4:ae:c0:fc:b5:49:aa:4e:2d:f9:42:ff:60:4c:54:f2:a3:5a:
01:f2:79:58:78:a7:1f:92:e7:cd:84:e0:b9:cd:6d:cf:fc:c2:
9c:15:10:31:f9:20:ba:1c:a2:5d:75:ef:b0:b0:7c:a7:bf:12:
95:70:4c:f7:ef:33:fe:ae:f2:01:01:c2:91:d8:bc:61:c4:ce:
6c:d2:68:82:ee:93:b5:38:85:a1:01:b6:1b:17:7b:29:75:5c:
40:37:21:20:d1:92:6a:66:76:60:f7:b7:43:8b:2b:d4:da:03:
be:eb:ac:fc:b0:c8:5c:35:d7:7b:70:e8:07:14:7f:1b:d2:b7:
6b:f4:7f:de:14:bc:60:72:c3:44:c1:81:37:01:b9:57:38:1a:
23:ce:22:9e:a7:03:3b:ee:4d:05:70:f1:50:3c:9f:10:d8:0e:
04:15:de:7b:ed:24:df:63:a2:0d:86:15:82:3e:35:2d:52:92:
2b:e5:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:52:57 2026 by rpki-client