
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
File: f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa (raw, json)
Hash identifier: kcS+LZLgE1JSREYAPjEWH9xVMZ5ZGgrlFlYGUnq0cYE=
Subject key identifier: 96:B8:D2:05:F1:DE:52:5A:A6:D4:E4:B8:E4:80:FC:CD:C1:5B:DE:F1
Certificate issuer: /CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Certificate serial: 010D0C9F4328584D5234FD689FCFCFA9D641E240
Authority key identifier: BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
Signing time: Sat 28 Mar 2026 18:44:38 +0000
ROA not before: Sat 28 Mar 2026 18:44:38 +0000
ROA not after: Sun 17 May 2026 13:00:40 +0000
asID: 40893
IP address blocks: 2620:ae:a000::/44 maxlen: 44
2620:ae:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:fd:68:9f:cf:cf:a9:d6:41:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Validity
Not Before: Mar 28 18:44:38 2026 GMT
Not After : May 17 13:00:40 2026 GMT
Subject: CN=7250c665-c0fc-49f5-8bc6-71d2f2408cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:07:59:ab:e1:38:69:17:4e:7e:5c:16:16:
a0:82:4a:d4:d6:24:70:15:59:74:02:e5:cb:d8:79:
c4:af:01:3d:2d:51:9e:b9:49:41:45:67:af:04:10:
73:42:36:4e:7b:3c:32:9c:00:f7:69:25:94:e8:e2:
aa:98:f6:7b:57:1a:7b:54:83:2e:44:6e:c8:82:81:
95:3d:3b:f8:f4:83:43:a9:63:bf:ee:b8:3f:8d:6a:
a9:fa:45:98:4a:0d:52:4a:cc:1d:24:16:b2:24:6b:
26:db:0c:8a:71:c7:15:7b:bf:e2:2d:f1:17:d8:7b:
99:db:86:8d:f9:70:6b:4b:b8:79:7f:48:11:62:4c:
49:15:fa:40:24:f0:63:ab:01:6f:41:42:2b:ae:5a:
d8:62:35:01:df:1f:e4:6d:ca:8b:55:ca:3a:22:b4:
40:96:87:7e:b0:ad:04:b2:8a:5d:ba:d6:ae:ac:81:
bc:66:2c:93:46:df:ae:b8:1b:f2:a2:11:51:cd:a3:
62:f7:57:96:59:59:53:66:1e:3a:5d:e8:a9:aa:24:
d6:10:a4:e5:08:ab:31:fb:16:7b:a1:2e:18:62:69:
2f:db:b3:b8:53:54:1e:8e:d4:d1:e4:50:55:a3:20:
be:0f:e6:24:50:91:c6:53:14:59:2d:cc:08:3b:57:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:D2:05:F1:DE:52:5A:A6:D4:E4:B8:E4:80:FC:CD:C1:5B:DE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
X509v3 Authority Key Identifier:
keyid:BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ae:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d0:c6:4c:e2:e3:5e:02:b5:a3:5f:22:c5:88:ae:5b:58:59:
1b:c2:5c:65:16:6d:c6:ca:43:da:64:8f:d5:a5:bf:ae:ee:5f:
9d:ce:8f:14:9a:48:87:d3:79:a1:01:3d:c6:56:31:5d:be:6a:
45:77:b5:ee:70:b5:02:b9:42:5a:2a:a4:28:61:99:d6:ce:dc:
2c:4b:70:01:df:cf:3c:6d:9c:aa:89:07:0f:26:ad:f2:6a:c3:
2f:e2:7a:9d:5e:d2:6e:ba:7c:75:15:b7:24:69:3a:04:f9:ea:
d1:06:58:f5:2b:84:92:87:cc:a1:d4:0b:5a:ec:b6:ae:4b:65:
a4:7e:d1:66:5f:fb:99:30:59:aa:a1:0d:d9:95:b7:8e:ab:05:
98:e7:b5:08:49:f4:5b:30:84:dd:44:82:ed:9c:d4:2a:a1:7e:
1e:ce:17:8e:0d:90:b7:9d:34:1e:c7:5a:73:3f:b4:d4:1e:16:
fe:72:17:0b:4c:e4:c8:41:0f:ad:f2:b5:3e:5f:71:a7:ff:0f:
f8:90:44:36:89:e3:57:c9:01:6b:55:0f:2d:7d:90:5f:d8:ad:
cc:96:ac:1b:4b:2e:11:ed:4c:c8:a0:ac:d5:b3:73:25:e4:80:
b7:cd:73:bf:d2:7d:52:42:84:42:41:2e:6d:b5:6d:bd:52:16:
c9:6c:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:31 2026 by rpki-client