
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa
File: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (raw, json)
Hash identifier: CEOGjSOoZ29NCjbDNiSYlCoQUmxkpq36kwh8GTaMUmc=
Subject key identifier: 4E:91:00:B4:A4:2E:25:F0:6A:D1:A4:36:98:EB:85:36:3B:5C:B3:8A
Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be
Certificate serial: 010D0C9F4328584E0006370BC439A6E43E7C4C70
Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 402258
IP address blocks: 2620:a4:8860::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:37:0b:c4:39:a6:e4:3e:7c:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=8847a780-3fb1-4a15-8b70-729730b88209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:96:dc:fa:99:e8:c2:9c:26:74:b6:34:fa:
3c:a5:9b:58:44:7b:38:ca:6d:26:f3:7d:11:0c:c6:
78:64:41:16:01:70:ab:32:fb:fa:ea:eb:40:a7:f4:
cf:a8:4c:04:59:eb:c3:ed:bc:5b:4a:32:4a:4f:82:
1e:68:53:d4:58:a8:b2:af:93:7d:92:be:4a:28:f7:
1a:7d:2c:ef:32:68:7b:1f:da:cb:56:68:6a:3b:7f:
a0:5d:6e:7b:d2:83:62:80:a3:25:58:68:27:82:b0:
07:71:b6:61:be:77:22:6b:ed:4a:dc:86:04:17:0a:
d1:44:97:f5:89:7e:56:b2:8a:ef:d0:d9:42:c0:19:
9b:6d:68:65:a3:f6:db:2d:4a:6b:6a:a8:b6:fc:0e:
62:85:6e:af:71:30:dc:61:d4:f9:4d:75:6c:cd:48:
33:0c:40:c6:e8:c6:13:0b:a0:bd:85:b5:5e:c6:38:
84:21:b7:cc:7d:d1:30:0b:71:86:4f:28:4d:e5:58:
8f:6a:f4:32:fd:72:dc:31:a6:d5:28:f7:92:11:80:
a7:37:43:58:ea:7a:e2:3b:ff:cb:98:34:0e:89:16:
4a:32:57:f4:9e:b2:20:d8:56:a9:94:aa:fc:0a:48:
58:93:a6:f5:1a:1f:03:c5:40:0f:03:91:02:d0:6f:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:00:B4:A4:2E:25:F0:6A:D1:A4:36:98:EB:85:36:3B:5C:B3:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl
X509v3 Authority Key Identifier:
keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a4:8860::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:1a:03:e8:67:a3:85:6d:08:ce:a4:3a:76:fa:14:a1:33:50:
85:8b:db:b2:e6:78:15:b5:ff:16:f1:78:42:43:bd:05:70:c1:
97:e9:40:f8:7a:fd:f6:ed:37:3a:b4:25:7a:0a:b1:62:77:92:
e4:c7:b3:2c:3e:70:88:5b:e8:c7:10:da:b6:e9:a4:ae:6e:a1:
72:f1:60:99:15:5c:20:18:0b:73:7e:b3:85:00:65:46:16:9a:
37:22:0d:f1:b2:25:e9:87:1a:7a:a9:4e:61:ae:d7:52:1c:13:
cb:f7:96:65:ac:44:59:be:49:75:43:f2:92:77:6c:9a:7d:26:
42:ca:1e:29:da:48:b8:bf:cc:85:7b:77:45:4a:f6:ec:8f:f7:
29:09:7c:cc:15:b3:73:f8:e1:c3:64:e6:5c:1a:d6:ba:b4:11:
53:31:4f:e5:f1:c7:fa:b2:b5:e7:6c:ac:f3:77:cd:12:ef:bf:
57:d8:8d:cb:73:40:48:e6:dc:83:44:78:df:9d:08:9a:a4:18:
36:b2:62:a9:a1:9f:68:57:69:bf:dd:a4:43:ee:7a:3e:40:35:
f5:73:11:3b:74:fa:cd:20:84:a9:9e:44:31:a8:08:70:3a:f3:
64:23:82:f7:a7:b4:ce:39:80:4f:83:0c:01:93:34:cf:a6:0b:
79:bf:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:37:11 2026 by rpki-client