
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa
File: 952792ae-3d78-36fe-8518-3e73e2e83906.roa (raw, json)
Hash identifier: erEYkRh5JxMf7ZW7Lpvp2hkPIWjjN5bS/e+cfs6n8JI=
Subject key identifier: 2F:4C:59:B8:F4:42:05:AC:11:51:A9:BA:07:40:6D:8C:51:46:B6:A3
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584CD407618205E000C7B47B2CC0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 25645
IP address blocks: 2605:8300:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:61:82:05:e0:00:c7:b4:7b:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=a938c932-bf9b-4fe9-a221-652de68e9eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:df:1b:84:64:70:3d:2d:2f:71:20:64:37:
c0:15:06:07:4b:1c:b9:04:2b:66:6f:48:48:c1:fa:
a9:68:05:97:d9:0a:9e:d9:59:fb:7a:c5:9d:c8:aa:
31:d1:d2:13:7d:9a:bf:06:f0:a1:bf:a2:37:65:45:
e7:f9:bb:61:8b:29:72:9f:00:09:01:e3:e6:75:3c:
ce:e8:4a:aa:14:cf:5f:af:e1:f6:18:ff:40:da:d0:
d4:27:fe:15:86:3b:bf:2f:d0:4f:08:db:8e:07:65:
2c:26:62:ee:02:a7:a5:4e:92:7f:01:b8:18:08:10:
ec:b1:0f:f1:26:d2:74:ab:9c:94:fb:2d:0d:c5:e4:
42:37:ef:bb:e4:65:d9:e1:49:38:bf:24:c5:06:c8:
62:94:99:25:86:12:bf:25:90:af:2e:f6:d6:56:a2:
f5:73:1f:bb:31:37:7c:95:68:65:c9:00:9c:fc:13:
f6:e2:6f:8f:f1:61:48:93:a3:47:b2:ea:99:99:ca:
b1:88:2e:8b:75:f0:21:88:d3:d0:2e:87:ed:73:14:
e7:2c:48:87:a4:ee:20:ac:ed:66:4f:1c:b8:59:c4:
ea:b0:eb:af:2c:33:c6:fc:ca:9d:ca:97:5c:9c:74:
ab:01:27:3d:f6:a8:fd:d6:04:58:95:d5:53:23:5a:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:59:B8:F4:42:05:AC:11:51:A9:BA:07:40:6D:8C:51:46:B6:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:8300:1a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:7d:c3:af:7a:17:5e:39:e5:aa:bb:34:c1:c7:c1:2a:b4:a1:
10:dd:ff:0f:a9:a7:d7:2f:09:8e:de:5c:53:55:bf:e0:2a:a4:
bc:8c:0c:05:66:8c:4e:98:d3:db:9e:b2:86:98:75:8b:41:fd:
cb:62:56:12:98:44:6e:e6:a1:0e:c0:b3:55:0e:8e:33:5a:49:
7f:17:78:03:e5:5d:7f:f7:54:e9:a8:0a:74:52:1d:65:17:d7:
63:d2:d5:c2:c7:ef:a0:48:df:c1:7c:8f:81:f7:6e:35:4c:1c:
e0:f6:44:f6:04:49:32:59:87:cb:be:de:e8:6a:78:01:7c:af:
db:11:d7:94:8a:c2:f5:e5:11:be:04:ba:e2:d6:29:2c:ae:fd:
fe:60:ba:63:0e:85:67:17:be:98:02:ab:ce:5d:f7:14:c7:9d:
97:81:18:40:7e:b4:cd:f7:11:67:f6:44:cc:b0:ee:55:8a:b7:
57:2a:4e:d5:8a:e3:97:78:07:0e:21:1f:d6:ee:13:3c:63:43:
91:b5:fd:b1:ec:e6:81:ba:13:75:f6:2e:c7:82:d6:cf:53:9b:
38:29:4f:ce:4c:98:e1:f7:b3:6e:95:fe:e6:db:05:23:8d:26:
86:7a:d3:16:9b:e5:2f:16:53:0d:3d:e6:1a:0f:1d:77:1a:d7:
67:0a:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:00 2026 by rpki-client