
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa
File: bd0731b8-b4cf-32f2-9183-9252be89bfab.roa (raw, json)
Hash identifier: UQgVnFKmVNUoFkhc1lTd+5+OKIs8f3QVugZGkgR4PBw=
Subject key identifier: E1:0D:44:E5:CE:43:9E:F0:8F:F8:EF:BA:BD:3A:3D:5C:D4:C0:35:90
Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945
Certificate serial: 010D0C9F4328584D26449EB177EBE8BEB2AE3440
Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 16509
IP address blocks: 2604:29a0:f000::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:9e:b1:77:eb:e8:be:b2:ae:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=77c8253e-fcec-4cf3-92bd-3a1440e302c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:34:4e:26:1c:7d:65:f1:13:f4:39:8f:72:
19:ed:b1:a0:66:ea:f6:9a:68:2d:f1:8f:57:23:ff:
80:44:36:43:62:e0:92:78:86:2c:0b:20:05:a2:06:
8f:8b:ea:26:4b:7c:9f:9f:39:eb:14:0d:4f:a5:36:
8d:a9:bf:6d:de:5a:ac:d0:f4:a9:f4:35:1d:c4:70:
fa:95:d4:6e:b8:0c:59:42:9b:e4:d8:7f:e7:fb:19:
4b:53:a4:0e:0a:5d:03:ca:65:11:de:3c:a3:73:5d:
6b:66:2b:ab:c3:f3:be:85:c7:cd:ee:a8:b6:ba:63:
9d:aa:7c:97:c2:b4:53:b6:ad:33:b4:bd:88:e6:a2:
e6:fd:11:19:0b:60:93:41:cf:80:56:49:0f:28:1e:
aa:cf:71:3f:54:71:31:fd:65:e3:7f:82:f2:1d:bd:
2c:44:21:c9:f5:5e:10:bd:f7:f3:f3:e1:c4:8f:58:
31:e9:4b:45:d7:6d:68:73:0a:1e:c2:5d:e1:2d:b5:
2d:d5:b2:b0:db:03:db:35:c1:a7:03:9a:bd:f9:9b:
f0:fa:5f:f5:06:41:4c:0b:56:a7:1c:bd:f9:de:9a:
7e:6f:ac:b6:ce:d5:ea:16:4b:2d:e7:bc:bf:68:2f:
28:00:e1:da:e3:0d:a3:2e:f6:4a:d9:bf:6e:ef:e2:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:44:E5:CE:43:9E:F0:8F:F8:EF:BA:BD:3A:3D:5C:D4:C0:35:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl
X509v3 Authority Key Identifier:
keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:29a0:f000::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:6d:00:23:63:c0:bd:50:1d:c2:38:cf:6d:d2:9d:37:40:dd:
ae:d6:28:91:24:73:0f:25:78:85:63:a9:88:54:14:a8:a5:23:
b5:8b:bc:b3:41:d2:3e:3b:26:11:0c:50:88:ef:76:98:3a:08:
c4:24:4b:5a:b4:3e:f8:09:d8:04:5f:5e:fd:c0:95:d0:78:20:
17:4f:ba:f9:db:a2:ca:fb:d0:3c:7f:e4:71:dd:05:fa:50:1a:
05:61:06:71:e4:c4:e1:30:8c:23:19:9a:02:d5:9c:f6:6b:7e:
f0:69:58:a2:48:d4:3a:81:48:34:8e:1e:a8:e9:28:7d:77:2a:
3f:14:80:48:c6:d5:64:23:29:14:b3:7d:e2:69:07:a0:69:21:
d9:97:95:7a:25:72:c1:35:0e:3c:e1:9f:f6:1e:78:2e:11:a4:
b8:1b:f3:d7:c3:f0:c1:fe:66:77:1b:7a:5f:4b:76:33:83:6f:
04:81:55:c7:3e:49:d2:da:fb:5f:66:a3:5b:2e:2f:f5:f2:41:
b3:cc:b8:59:09:af:6a:3c:e9:9b:30:ea:23:74:8b:9c:06:6e:
c3:f6:0a:22:8b:6e:9a:49:eb:0e:91:72:12:0f:02:b8:5d:76:
24:8a:e9:e6:28:d0:2d:8b:d9:17:fe:45:1d:d4:b7:2c:ab:34:
77:0a:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:35:43 2026 by rpki-client