
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f383a22-412a-33d8-9079-4ec978f34e0b.roa
File: 2f383a22-412a-33d8-9079-4ec978f34e0b.roa (raw, json)
Hash identifier: jqb0k3pLm9R9g4Wmd6uUNW4X/NNM7k9cfRgVqdORgcM=
Subject key identifier: A3:5D:02:BB:08:C3:7E:C0:69:6C:95:EE:55:51:CF:C9:54:70:3E:62
Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial: 010D0C9F4328584CB551E5E4C9BDCDACC00A3500
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f383a22-412a-33d8-9079-4ec978f34e0b.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 399976
IP address blocks: 2602:80c:20c8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:e5:e4:c9:bd:cd:ac:c0:0a:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=a63fd7dc-ff7e-4764-b0a0-92a24807697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:03:7e:ec:22:24:20:aa:2e:59:88:f1:a1:
39:fc:7b:71:c8:6f:90:c5:4a:cf:c7:bd:bb:1a:ff:
2f:50:43:64:db:e7:c3:93:98:ad:e4:34:d2:b2:d0:
61:78:2e:39:ac:2e:8e:9d:ab:e5:aa:05:bb:07:ba:
f5:90:6b:6e:ac:f7:9d:23:ba:9b:e3:aa:89:57:86:
40:8d:4c:8c:13:1d:92:ab:4a:bd:82:c9:c9:85:07:
e3:7c:10:9a:6e:59:18:e4:4c:3c:00:23:24:fc:1b:
f5:c4:f4:bf:14:0b:5c:43:54:f8:66:74:c4:10:54:
df:8c:97:72:ca:48:fa:8b:0c:0d:c8:29:67:31:b6:
de:39:27:56:b5:29:90:99:5e:9c:e5:2d:c1:46:16:
58:f0:5a:fc:07:4e:41:ff:88:d6:0d:a1:ef:2a:24:
68:7c:0d:c5:d6:ee:15:93:7a:66:cf:7b:96:67:1f:
85:61:d0:0f:30:ec:1b:a8:1e:83:2e:5c:03:24:3d:
89:03:a8:96:54:47:52:93:48:f8:a5:f7:65:3d:d7:
77:a8:37:8e:1c:7c:67:c9:c7:61:1a:30:12:a7:81:
c5:ef:68:7e:4f:da:d1:42:79:1e:e2:86:00:18:5e:
09:20:e7:ea:58:80:0d:ab:4e:b3:41:73:83:cc:50:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:02:BB:08:C3:7E:C0:69:6C:95:EE:55:51:CF:C9:54:70:3E:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f383a22-412a-33d8-9079-4ec978f34e0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
X509v3 Authority Key Identifier:
keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:80c:20c8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4b:4a:88:8e:33:d5:23:c3:05:93:89:1e:d4:74:13:f6:9f:
a1:97:ba:62:9b:31:d9:13:17:77:65:01:c2:1d:c7:38:d1:a8:
a3:e2:80:89:9f:7c:5d:9b:40:0e:d4:2e:90:8d:56:83:e2:7d:
2d:a1:88:34:6f:d7:3c:4c:56:14:5d:34:2d:f9:39:af:7b:e1:
b5:51:61:75:ed:0c:0f:0d:d9:55:c8:67:06:2f:02:52:ad:c3:
c6:5f:de:75:83:b1:f7:07:cc:a3:9d:a3:e6:b4:21:4e:0e:58:
8d:7b:c8:51:01:46:2f:2b:12:2d:b7:d1:9e:d6:db:c1:2e:26:
53:9d:2b:ba:95:71:29:73:9f:c0:63:b8:30:de:bf:70:17:9f:
85:f6:69:b4:e7:69:17:70:6d:18:da:fd:5b:a6:7d:1d:6b:c6:
71:30:ff:cc:8c:37:84:21:f5:1e:78:c3:59:e8:e3:6a:ef:0a:
90:7f:03:45:83:48:27:7e:e0:78:f7:4f:12:f7:b3:0a:be:ce:
9a:10:e1:64:6d:41:e5:43:1f:44:f8:1d:3d:ec:01:d5:ae:9a:
c1:a9:30:2b:e4:28:86:3b:09:85:a5:2b:65:06:b4:6c:b1:ac:
c4:ed:98:67:ef:73:32:e0:61:8c:c4:d4:bc:e6:f4:3b:ea:69:
d1:4e:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:56 2026 by rpki-client