
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db1cded-ee7a-3e29-a8ea-5a109fed9f11.roa
File: 9db1cded-ee7a-3e29-a8ea-5a109fed9f11.roa (raw, json)
Hash identifier: eDflerdwCyAwOozKNmWIVDAhMw44Ddlf04y+IMsJy2k=
Subject key identifier: B2:5C:17:77:4D:AE:CB:F4:25:3C:04:39:1F:97:A5:BB:55:10:11:CF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D4D5A3538FAAD15A2E1E04D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db1cded-ee7a-3e29-a8ea-5a109fed9f11.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 19905
IP address blocks: 2604:2d80:3000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:35:38:fa:ad:15:a2:e1:e0:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=433d8183-d73f-4754-b386-9080a2767c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:f5:a1:1d:51:fa:09:ea:16:d5:f9:3a:06:
d2:d9:bd:28:96:c7:b5:54:71:4f:fd:85:50:8c:48:
62:2d:34:8e:18:c7:2f:81:ec:43:c3:a9:b8:70:77:
89:ed:f5:38:7e:0c:93:b7:56:2b:e7:aa:a8:0c:a4:
50:50:ea:43:a5:c2:7f:23:5b:a8:ec:16:d1:8d:3a:
53:8e:81:a0:2b:99:7e:6f:78:eb:fb:b3:3d:46:8a:
54:43:bb:9f:0f:6e:bd:b9:b1:88:2a:cb:63:d4:58:
a8:b7:32:db:f0:6d:f0:22:5b:b9:d2:98:52:03:91:
f2:89:ae:c2:6f:47:a0:81:03:4a:dc:5a:df:6b:7a:
af:38:42:32:de:39:73:07:c8:24:6d:f9:21:b2:86:
f8:dd:c0:91:6d:11:2d:3c:10:3d:88:0f:0d:b5:39:
3a:01:bd:ba:d8:93:45:4e:c3:fd:b3:14:10:7a:a6:
3b:2d:26:b3:f6:7f:0a:a8:48:f0:7a:05:63:c0:58:
ea:0b:16:90:27:34:24:b5:8e:73:00:a1:3a:a9:52:
56:0f:38:53:49:a4:65:d5:9e:99:1e:9c:a9:e4:a3:
50:f0:2c:fd:83:0a:5a:6f:41:1a:1c:84:0f:4a:75:
df:c8:ed:db:46:5e:69:7a:9d:9a:e7:10:85:72:a3:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5C:17:77:4D:AE:CB:F4:25:3C:04:39:1F:97:A5:BB:55:10:11:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db1cded-ee7a-3e29-a8ea-5a109fed9f11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:3d:f9:3e:94:eb:71:17:45:88:b6:d4:07:a1:9c:61:1d:ca:
ab:9c:22:ac:8b:16:31:62:83:f9:21:d3:30:51:86:bf:68:83:
99:cc:7a:7b:dd:3c:46:87:93:b5:48:9b:32:b1:44:af:95:8d:
ee:55:7d:7e:90:64:b3:b1:28:d2:04:72:bf:17:bb:aa:46:c4:
1b:ce:98:c7:80:55:5a:a8:4f:85:7f:4d:8f:b1:4c:f9:c2:df:
04:40:b6:ed:ba:ee:53:8b:d9:6c:0d:e2:c2:58:05:62:42:34:
06:c0:b2:f5:79:b3:22:1b:a9:bc:03:dc:20:39:d6:96:f9:c0:
cb:ef:3d:7d:e6:60:4b:34:ec:bf:4e:39:a2:7a:bb:d3:56:75:
ec:13:fc:9a:0d:58:c5:b3:64:8e:9c:21:06:c7:c9:a3:ce:46:
4d:27:1d:84:8e:29:84:93:24:c7:96:51:01:82:de:be:0d:2c:
39:63:b9:a9:4a:38:27:7d:a6:12:a2:5f:67:fd:5c:7f:3c:1a:
b8:00:ac:35:3d:1f:60:1f:b4:07:94:62:d4:37:5f:01:ae:bf:
16:73:d0:b0:93:99:60:88:75:2e:42:38:95:ae:e4:05:63:33:
e1:a2:75:16:95:90:cd:17:4e:ad:a7:cd:17:9c:37:18:a2:c3:
79:98:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:31 2026 by rpki-client