
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa
File: d8f60b09-6e07-3264-8ee7-432cff810a56.roa (raw, json)
Hash identifier: 8KfoxdHL1f8FO7f+bTU+htzU/YRe1od0s0QFBdnbmA0=
Subject key identifier: C5:16:48:73:84:CC:99:FD:D2:17:F6:06:E8:2F:18:A6:0B:87:F1:78
Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial: 010D0C9F4328584D67DFB3788FF00FA69381D100
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 57974
IP address blocks: 2602:2d4:d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:b3:78:8f:f0:0f:a6:93:81:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=23af967d-0256-48ba-9b56-83fcf4389730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:81:9b:5f:4b:b0:33:4f:dd:ab:d6:6e:90:
8c:d9:d2:0e:22:96:92:55:95:d2:5d:6d:52:58:55:
ea:8b:12:a5:94:a5:f6:51:bd:88:79:4e:e2:4e:2e:
ea:7e:a8:c7:26:18:56:11:87:34:95:7d:0f:98:d5:
d6:c2:04:c8:50:bf:1a:20:64:33:83:cc:c8:1c:3c:
2b:86:a4:6f:9e:4b:c7:c8:de:a5:7a:4c:14:c0:7f:
01:83:4b:06:96:20:d3:f9:da:f9:12:00:f0:bb:0a:
e8:b6:91:71:c8:e5:80:1c:14:c2:dd:f8:44:8c:e5:
52:a0:e1:2a:14:d6:23:f7:6f:d2:11:7a:01:1f:d6:
f2:37:77:c4:1b:cf:77:6f:55:fd:70:c2:1c:36:c5:
7e:f6:c8:88:8c:8b:af:18:40:b9:e0:24:09:cd:f3:
8d:15:67:e8:76:6c:e5:2e:e5:4c:cd:3c:75:2a:48:
1e:c2:9c:ff:7b:30:58:67:72:1d:18:2e:ff:c3:3e:
d2:df:a6:3d:2e:fd:8c:00:29:e1:4f:20:4a:6e:f6:
cc:8c:b0:ca:1e:01:bb:2e:69:26:f4:37:13:7d:16:
f5:86:88:ae:b7:fb:74:ec:a8:59:8f:49:00:27:c6:
b8:5c:68:3d:05:a9:cf:cc:46:16:37:80:f7:61:29:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:48:73:84:CC:99:FD:D2:17:F6:06:E8:2F:18:A6:0B:87:F1:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
X509v3 Authority Key Identifier:
keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2d4:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:33:dc:ed:43:c2:fe:bc:fa:db:b9:5c:54:40:ca:bd:77:a7:
45:8c:da:e5:5f:5b:65:1f:ef:b3:27:b8:d4:3a:3d:e7:25:6a:
af:52:01:fa:a0:51:a9:11:22:de:a1:9c:b9:5d:21:64:fe:ba:
62:90:86:d2:32:20:18:e7:21:56:dd:4d:9c:c1:9e:04:01:48:
d6:50:4c:86:8e:48:19:66:5e:67:33:cb:03:39:58:96:7c:33:
db:2e:44:8d:a1:ab:2d:6b:dd:9f:ab:5f:a9:a6:c1:1b:bd:f2:
bd:6a:26:3f:4d:f9:f9:92:37:ab:f5:40:4d:6d:2a:9e:31:8e:
df:1a:0d:47:74:03:80:63:3d:40:f8:fe:0e:d1:c6:80:da:97:
7d:c7:c9:a0:b1:a6:6f:ec:ba:4b:26:4f:33:a7:fa:7e:87:0f:
69:59:17:03:05:ae:7b:7e:95:8d:b2:75:d1:e3:d6:17:52:45:
f2:51:d2:02:b1:6a:ca:9e:76:0e:99:f1:b4:0a:28:84:d5:c3:
ad:4c:cd:5c:2e:9f:d3:d1:c3:23:88:81:0c:16:c3:c5:b4:f1:
c2:31:2e:ed:39:af:c6:55:98:93:fa:d1:c9:9c:96:fe:f9:9f:
6a:fb:21:11:13:53:75:3f:f8:08:c2:91:af:c9:2d:38:45:25:
58:e0:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:46 2026 by rpki-client