
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
File: fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa (raw, json)
Hash identifier: l+ONO+j/oqDK/K0bYQXRdON8cspIKKphcMVR9KItCA8=
Subject key identifier: DF:6B:DC:A2:4F:A1:25:A9:D6:18:44:9F:BF:35:B2:72:F3:3A:4B:58
Certificate issuer: /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial: 010D0C9F4328584D037CFA648477E9C815FA5080
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 398891
IP address blocks: 2602:807:e000::/48 maxlen: 48
2602:807:e001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7c:fa:64:84:77:e9:c8:15:fa:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=d77d8efa-d6c8-4ed5-a97a-fec5294d0a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:fe:43:3e:74:fc:3b:02:0d:da:2e:78:28:
4d:b2:f2:6a:60:d3:59:d5:dd:32:15:1d:e2:81:f7:
bc:1d:78:ac:e2:00:ab:b9:77:9d:0d:9c:b0:5f:b9:
94:ee:f7:c0:c0:86:1e:36:62:bf:a8:c6:7a:a7:e3:
bc:e3:5c:86:58:b7:da:4d:45:47:4a:56:13:8a:e6:
7a:2f:f2:fe:6c:4c:c4:b6:fc:c0:6f:da:11:56:e7:
4a:83:46:9a:37:b3:70:20:c3:1a:f0:96:36:52:cd:
1b:f8:de:f5:3b:ea:c2:c9:4b:5c:14:dc:ff:b3:7c:
fd:7f:d2:1f:0f:af:e7:2d:2b:d8:7b:7e:9c:fe:02:
5e:ed:9b:3c:c2:9f:11:84:d2:9d:54:74:0e:75:f8:
2d:8f:bf:53:24:a3:2c:54:d4:81:80:f4:92:6c:47:
2e:b1:2b:eb:a6:63:22:bc:d8:bd:a4:64:4b:96:df:
c9:2d:fc:23:af:1c:c0:15:1a:77:5c:d0:2e:18:83:
1b:47:63:d2:57:55:36:dd:44:af:53:69:2f:9c:20:
df:54:49:43:92:1d:ca:5b:17:4e:23:64:aa:3c:94:
72:07:7e:03:83:64:cd:3d:f9:1e:78:89:a2:17:f1:
c7:d7:c9:27:1c:b8:c7:12:88:f9:ef:7c:bf:db:36:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:DC:A2:4F:A1:25:A9:D6:18:44:9F:BF:35:B2:72:F3:3A:4B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
X509v3 Authority Key Identifier:
keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:807:e000::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ea:39:a2:12:77:33:81:a7:f4:5c:8a:e7:64:3e:c6:19:98:
e5:5f:b1:5d:de:b9:0c:01:00:5d:e4:14:fd:ad:09:a1:74:87:
a4:6a:11:1c:ac:55:31:8d:34:ae:d9:34:e7:4e:11:81:0b:8e:
c2:69:cb:30:b0:0b:8f:08:bb:43:f4:df:17:3c:8d:36:c2:28:
76:ae:bb:ec:80:05:0d:01:7e:e8:34:a5:e5:cc:2b:ec:e8:55:
e2:c8:ff:36:1f:a8:de:65:75:d9:20:79:ed:b1:28:a3:62:24:
e6:4e:2c:1b:69:29:20:0e:81:07:3b:d1:04:6e:1b:88:6c:b9:
b0:f9:ba:80:d0:f8:74:18:52:3e:4c:f5:04:e0:f1:c6:27:3a:
a5:3a:b8:e8:7e:a8:d2:bf:c2:f2:c8:ae:d1:c3:35:fb:86:2c:
28:e5:ed:79:11:12:93:46:e7:5f:1b:69:05:b5:24:b7:76:25:
f7:22:a8:7a:f9:05:b8:4a:49:20:79:4d:bc:e5:c8:e6:7e:4e:
98:84:de:44:53:3b:e9:22:52:84:c2:d0:2d:0d:8b:49:9e:8a:
80:a5:40:8c:43:e3:30:55:e9:a5:e7:43:49:48:9f:2c:03:f2:
e3:d7:07:72:21:8f:39:f4:f3:c0:fb:08:17:4c:c5:ea:58:54:
0b:02:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:23 2026 by rpki-client