
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
File: 85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa (raw, json)
Hash identifier: N2vVvuAMxzz1UVDJfiKNNK6DrNOlPNUjdvI1VjIVD80=
Subject key identifier: 95:48:36:24:81:43:A6:87:DA:86:D4:0F:29:F8:78:13:CF:7D:17:0E
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F4328584D7CCFD6CEF3746546B8623BA0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 3423
IP address blocks: 2602:fbdc:8e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:d6:ce:f3:74:65:46:b8:62:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=38fb59e6-5d8f-475d-97b6-d9b8fcd9c3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:f0:f1:c8:17:4c:46:fc:77:ea:d4:82:3d:
c4:a2:8a:c9:4b:ea:b6:45:f9:e9:39:f2:f4:da:96:
7a:bf:55:b0:1c:6a:a6:08:35:cb:7a:d9:28:10:96:
65:d5:a4:f6:c6:c2:dc:2e:94:e2:20:a9:c7:fa:0d:
ed:18:b4:e8:c3:c5:5d:5b:f7:e0:b4:29:27:cd:b4:
2f:a0:2f:07:5e:9a:15:66:dd:29:e2:11:a7:0f:d1:
79:ce:e9:9c:39:e5:b2:dc:b9:05:aa:59:f8:09:a9:
a7:b4:73:61:35:48:cc:bb:81:b8:ea:77:aa:b9:58:
dc:a6:f4:63:19:56:46:8b:a1:87:e8:42:9d:70:2b:
89:e7:83:fc:6e:d8:32:33:ce:d0:a3:76:21:59:d8:
ff:f6:1b:76:91:b2:6b:11:40:50:a1:2e:a3:28:74:
8e:e9:90:82:1c:f4:c0:68:04:f7:3f:d6:bd:c7:22:
95:a0:80:41:9e:48:dc:d2:a7:34:e3:6f:5f:de:d3:
93:e2:42:cb:8b:e5:1e:12:c6:0f:5f:10:02:ec:78:
77:16:58:d6:92:e5:da:ad:e3:13:e4:3d:08:34:79:
a1:2d:a8:5b:68:15:f4:3c:e5:ff:8c:9a:2e:44:15:
51:18:ab:28:e0:fa:26:1a:79:e0:cf:85:b0:5e:22:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:36:24:81:43:A6:87:DA:86:D4:0F:29:F8:78:13:CF:7D:17:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc:8e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:84:12:9a:44:3f:58:e9:96:73:cf:53:ef:5e:3b:2c:9b:3a:
04:fe:e4:f7:76:ea:df:aa:e7:ec:d2:33:12:84:ab:7a:30:c3:
ee:a4:9e:7a:fd:69:be:7a:6b:cf:fe:af:00:67:3f:d6:eb:3d:
05:50:b6:ea:c0:1d:60:3f:85:be:59:58:33:34:27:fb:8d:e4:
77:dd:92:62:5b:bb:b9:c5:ca:5d:d1:03:b1:3b:0b:3e:9d:c2:
dd:e1:11:01:50:a9:8a:3a:be:95:0a:79:0f:9a:5c:15:e5:b1:
0a:73:bb:20:da:3e:44:cf:45:cf:6f:76:19:c5:e7:52:d1:65:
e4:e3:74:77:a4:83:2c:7f:12:e6:36:19:e4:be:3c:ca:4e:22:
c6:1f:f1:3c:cd:2a:d4:b5:64:e2:80:a3:01:f0:5b:c8:77:1d:
39:e2:54:b0:22:96:41:2e:38:fe:cb:75:22:c3:66:5a:a2:8e:
78:36:f0:00:b3:74:86:45:1e:18:6c:ab:c6:b1:31:37:8d:f5:
4f:2e:97:8c:ca:66:de:08:02:80:d7:c6:57:fa:fd:1e:c9:48:
fe:47:4e:04:1a:24:96:ae:75:0f:46:18:fb:61:c3:21:5b:ba:
2f:cc:a7:82:6f:da:cb:78:0c:b6:cb:88:b8:43:87:4b:29:2a:
e2:f0:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:32 2026 by rpki-client