
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
File: dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa (raw, json)
Hash identifier: iQzPmkM9HFxR0ecdxJ099yIUJWXOJE3KqFEosr/idNY=
Subject key identifier: 98:8C:45:46:AC:96:59:AC:D6:7D:75:D4:C9:4B:AE:B0:D8:33:40:7C
Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial: 010D0C9F4328584D67DFC9423817528B44BFAB00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 61112
IP address blocks: 2602:fa4f:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:c9:42:38:17:52:8b:44:bf:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=ce42af53-e1de-4030-9b40-084f0b815d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:99:92:ef:ab:b9:e5:a8:d9:f0:de:4c:4f:
69:b1:d2:1c:ea:12:29:d8:5f:98:18:27:f6:53:30:
cb:de:0b:d1:c6:c2:1a:3b:a2:5c:36:9d:3f:75:18:
9d:b3:dc:bc:ad:9c:3f:ce:fd:80:57:6c:a9:fc:c2:
49:43:4c:fd:4a:df:25:d8:3f:37:78:a9:1c:30:71:
ba:07:a0:81:dc:b1:89:14:1b:dc:0b:2a:d0:5e:1f:
70:6d:32:7a:7a:6b:f4:b7:49:89:f6:85:b7:5d:92:
16:e3:6b:ba:40:7a:43:82:41:3b:15:7b:bb:fb:62:
2d:e5:65:08:8b:cf:63:97:0d:e2:c4:e5:12:55:db:
29:a0:c4:44:53:a9:9a:dc:af:0a:fe:2d:62:60:d4:
e8:5f:13:9f:8e:43:ea:f6:5b:8b:39:c8:17:bb:4c:
44:b5:82:96:39:01:aa:a4:58:15:54:28:96:0a:e9:
38:ab:59:46:6d:c8:50:94:34:7e:d9:dc:a5:53:59:
60:5a:83:1b:36:aa:11:37:a8:f7:ef:f2:56:b1:75:
52:b0:be:5f:52:ff:0c:b0:7d:a2:55:12:53:a2:53:
ff:7d:b6:e9:b8:f9:f5:4e:6f:5c:a5:e7:89:40:81:
1d:19:ea:a0:dd:fd:4c:71:34:f5:4e:33:2d:0c:bf:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:45:46:AC:96:59:AC:D6:7D:75:D4:C9:4B:AE:B0:D8:33:40:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
X509v3 Authority Key Identifier:
keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa4f:900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:89:6b:48:cf:4f:98:f3:df:0a:fe:03:7d:35:b7:dd:61:23:
3a:cb:0e:7b:3d:4b:3f:6d:00:fc:56:ce:8c:7a:cb:76:69:22:
5c:00:31:4c:5e:6c:04:32:f1:4f:39:93:a1:ef:14:ae:0a:d0:
02:75:58:69:65:0c:ff:90:ba:0b:bb:ba:b2:cc:cd:40:40:3f:
43:17:e9:19:8f:f6:cb:c2:12:75:d3:82:40:21:92:1c:10:be:
d5:78:dc:83:09:a6:9d:a3:57:04:04:3e:e7:8b:fc:ab:aa:62:
72:82:02:ab:e1:b7:44:77:84:ef:1d:72:d7:b3:0c:3d:24:96:
d5:11:93:13:0b:70:1a:51:88:ab:32:24:52:66:76:ba:9d:da:
e5:be:79:b9:53:d0:9c:97:4c:c3:ef:e6:03:26:1d:9f:59:79:
d2:42:62:5b:51:5c:9c:54:3a:8a:62:61:dd:f9:9f:fb:b2:78:
ff:d9:3b:fa:21:ab:7e:ff:d2:00:0c:7c:00:64:d4:ab:3f:5c:
10:cf:a7:a8:78:96:11:33:a9:41:fa:a3:32:dd:74:2f:c5:10:
91:af:7e:bc:50:8b:0c:56:18:de:9a:8e:08:d0:0a:8d:3b:85:
f0:8e:f6:6f:fb:26:9d:12:c2:74:86:cc:e3:96:35:e9:bf:60:
d9:c8:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:21 2026 by rpki-client