
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa
File: f2344786-e936-3125-abb5-5f6da46e1208.roa (raw, json)
Hash identifier: ez+tXhxixZs3GnfgHgwH087BVlc7GSrzKHYK5PEgSTI=
Subject key identifier: 4E:2D:5F:54:77:AE:3D:54:5B:21:ED:75:9E:73:16:FB:6D:1E:62:23
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328584EEC54584B3BD367EF5BB4F280
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa
Signing time: Sat 22 Aug 2026 16:29:14 +0000
ROA not before: Sat 22 Aug 2026 16:29:14 +0000
ROA not after: Fri 02 Oct 2026 21:00:12 +0000
asID: 399804
IP address blocks: 2604:4cc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ec:54:58:4b:3b:d3:67:ef:5b:b4:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Aug 22 16:29:14 2026 GMT
Not After : Oct 2 21:00:12 2026 GMT
Subject: CN=9484dad1-19d3-4adb-852c-5f4f80db4bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:c0:9e:a6:e2:47:25:fe:30:12:34:6b:2b:
a4:73:f5:7f:47:bd:a6:44:52:ec:bd:8a:04:be:00:
b1:70:22:b1:f9:2f:dc:29:23:a7:98:4b:c5:67:83:
31:df:20:82:82:71:e1:34:f3:e4:c0:51:b5:78:d1:
28:ab:5c:41:58:ac:2e:34:ea:ab:ef:bf:4a:48:89:
96:83:f8:00:56:15:85:0a:8b:ce:04:7a:fe:ec:89:
18:47:0d:7e:50:0b:5b:0f:be:4a:9d:ba:0b:3e:6c:
a3:df:45:f3:5e:bf:21:93:37:8e:cc:18:cf:85:32:
87:8e:df:74:02:1f:bf:f9:69:11:96:70:d4:79:cf:
e2:c6:b5:2b:e8:1e:19:13:29:47:cc:04:ad:24:37:
5e:bb:28:ed:ea:b8:7d:55:de:06:f6:fc:f3:11:fe:
73:b0:53:c3:7a:16:81:bf:df:fc:fe:df:8c:fa:0d:
01:4d:23:67:82:fd:84:b9:c5:71:27:e6:b1:a1:cb:
e4:f5:fd:7e:3f:72:c7:d9:76:d7:00:0d:25:1a:c1:
2c:72:a7:95:ea:de:fd:36:71:3e:f6:be:57:23:84:
d3:a1:38:00:ee:be:b0:ac:4d:b9:d5:3f:23:ca:bd:
57:49:69:b7:2c:5d:f0:ef:95:f6:68:55:05:9c:61:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:5F:54:77:AE:3D:54:5B:21:ED:75:9E:73:16:FB:6D:1E:62:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4cc0:11::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b5:56:93:30:2c:7a:ca:79:85:3a:8e:93:8a:eb:95:81:16:
78:d2:9f:37:73:9b:74:49:28:dd:0b:c5:71:13:42:38:9a:7b:
f1:da:25:36:dd:08:57:35:e3:51:3a:a0:d2:75:f2:db:5d:7b:
34:21:18:fa:e3:91:93:05:76:9c:c8:79:02:5c:65:14:fe:9e:
70:2b:1d:25:15:59:d1:d3:d2:e6:1a:a1:85:bc:0a:a9:b9:08:
d4:ce:a8:36:d0:9c:6a:20:b9:78:d4:f6:fe:7f:04:43:e9:86:
7e:f2:25:10:04:e7:62:8c:0d:f6:e4:44:d5:e9:6b:62:48:be:
24:06:4e:4b:05:c7:b2:44:43:18:92:47:d8:e6:c4:24:8d:fe:
78:25:b8:56:8a:3e:00:9d:b3:80:e4:87:37:8f:a1:ca:9d:76:
50:f9:f0:55:6f:da:fa:27:e1:80:f8:4a:32:95:ff:23:27:4d:
13:29:49:06:70:3b:e7:e0:e4:6d:cd:23:59:fe:1c:74:0f:ab:
65:b1:65:93:95:3f:e6:e9:28:5e:2e:d2:8d:f1:76:6f:df:36:
08:bd:70:79:88:b7:78:68:57:aa:50:0b:83:1b:b0:b4:fb:70:
40:6f:30:36:d6:c0:ac:1a:1d:5c:d5:5a:b7:6e:5d:0b:ac:fa:
bc:55:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:56:53 2026 by rpki-client