
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa
File: ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa (raw, json)
Hash identifier: Pg0DB7J7Ftx/zU7t8di9c42m0l+iwz48J1H/1Mm3x4I=
Subject key identifier: B8:BF:16:94:65:18:51:B7:19:0F:DE:1C:67:3D:AF:D8:BF:7F:F2:35
Certificate issuer: /CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Certificate serial: 010D0C9F4328584D6AAAB08449820437C7973400
Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 12186
IP address blocks: 2607:2c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:b0:84:49:82:04:37:c7:97:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=9eb0e3f9-bea3-4b1a-8a78-a845dd219505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:08:0b:48:4b:df:ac:12:86:c0:40:7c:05:
73:ff:58:72:a6:27:ea:d9:18:3b:77:4d:e8:3c:a8:
92:55:68:a1:23:8e:5b:7a:db:53:e0:91:7f:62:17:
ed:4d:cc:63:e3:75:af:50:ca:1f:8b:45:62:7a:51:
5a:41:49:ef:02:8d:4f:03:4d:5e:ae:08:0a:98:ed:
97:31:75:b8:8f:04:3e:c1:0b:b4:b5:21:b5:c7:e5:
64:71:39:d2:bd:db:09:6c:a3:7c:a1:67:16:f3:ac:
80:36:e5:83:68:18:21:11:de:a8:ee:a0:38:79:9b:
64:69:91:5e:06:22:2f:65:6b:77:94:68:87:83:f1:
c0:2e:70:8b:1e:42:4c:08:b6:e6:65:69:15:65:30:
a7:fd:5a:97:b5:cd:ef:81:94:4b:32:f3:b3:7b:d0:
d2:0a:ee:4d:49:e9:4e:d5:71:49:69:de:c1:44:cf:
60:82:3b:b0:af:ec:7f:e1:8f:86:6b:26:87:77:63:
b9:fd:a9:74:a0:f0:45:41:3e:5f:12:77:6b:ec:a1:
2c:11:10:68:b3:d1:ee:f0:23:3f:2e:e5:09:36:8d:
e9:76:d9:50:f8:dc:7a:dd:9e:6a:78:3c:29:58:65:
f4:04:59:ee:8a:b7:d8:c9:7d:54:3b:13:6c:83:bc:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:16:94:65:18:51:B7:19:0F:DE:1C:67:3D:AF:D8:BF:7F:F2:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
X509v3 Authority Key Identifier:
keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:2c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c2:ee:b8:ba:96:da:9c:0a:cf:ff:36:5c:f6:88:cc:27:b4:
72:0a:3c:4f:48:e3:79:55:33:e1:08:90:9d:4f:ec:3f:28:30:
05:5c:c5:fb:8b:30:ef:26:b4:87:e1:37:69:3c:c1:96:c1:ba:
e9:e4:77:a2:77:07:88:3c:7b:0b:8b:f5:cb:7a:73:45:4f:f9:
8e:a3:6d:41:85:ee:0d:36:7e:a9:89:0b:98:ae:83:a7:2e:b5:
23:9d:93:11:99:f1:4e:9d:96:85:b7:ef:5f:12:1c:6e:47:73:
72:df:35:ea:7f:18:44:79:77:45:d5:ff:92:d4:7d:d8:89:4f:
e5:2c:02:d9:48:1e:c7:e4:69:23:7d:1d:2f:a3:12:c0:a3:29:
19:9e:93:c6:c4:ec:fe:88:63:31:a5:24:9f:05:55:73:66:59:
06:76:e6:70:59:70:ee:af:26:0d:0b:92:98:b7:46:54:33:d1:
ec:e6:dd:c4:2e:69:7f:33:91:c4:ae:6f:2d:db:46:c4:8e:4c:
79:67:c3:55:9d:30:a1:90:09:4e:d7:fc:ff:05:2d:45:26:b3:
6f:da:c8:d3:c0:5b:53:4e:11:81:e5:5f:ed:85:df:fa:73:c3:
8d:60:21:2e:ff:1f:6f:19:c2:fb:ff:15:5e:06:39:6d:e8:b5:
75:44:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:21 2026 by rpki-client