
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
File: f1bbd65a-219c-3a5e-8202-9e0541272dca.roa (raw, json)
Hash identifier: kDiagvo5lI3cAHDByZ40rnuMTfzoK+/kK/p+Pso7O68=
Subject key identifier: 29:99:C0:9E:02:6A:A3:67:35:34:C2:7D:2B:45:8D:87:25:07:4C:57
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584D4D5A6959DF8DF32F84A1D6E0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 20253
IP address blocks: 2606:bc40:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:69:59:df:8d:f3:2f:84:a1:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=295372cd-be9b-4f6a-96bd-c7ba1a7bbb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:25:eb:32:d8:3a:a7:fe:f5:44:36:49:4c:
ac:a6:db:18:13:b0:e6:e9:c8:a2:2e:17:4c:7c:a5:
2c:83:1e:5a:45:7d:00:00:df:43:ab:d5:e1:02:0f:
cc:5a:a1:6b:91:aa:75:9d:9d:3e:b0:a7:95:a8:6d:
92:4a:4e:8d:2c:9f:7b:2f:7a:bc:ac:e7:b1:07:b5:
a0:fe:af:33:c4:d8:6c:35:7c:b6:69:66:53:ef:2a:
60:48:02:2e:1e:f1:43:45:56:42:49:21:79:b5:74:
bc:6a:cf:39:42:88:d2:26:5a:bd:bc:65:05:2b:ba:
e3:38:4b:1c:53:d4:04:1b:3b:a0:e8:c4:79:b4:cb:
67:4c:7c:3f:6c:4d:27:bc:75:b9:4a:d6:9e:05:a3:
08:dd:8f:e8:38:13:12:c9:4a:b7:40:ce:7c:45:1e:
2f:7e:50:52:62:c5:68:ef:b4:f0:72:f0:b9:ca:0a:
7f:61:58:ff:71:4c:7c:70:e1:a9:27:9f:50:17:a7:
06:42:5a:a4:9a:15:5c:ff:a0:32:e6:68:79:04:0b:
27:39:27:59:db:7d:f1:60:28:71:c2:72:32:09:be:
15:a6:9c:62:9f:6e:ea:0d:7b:d7:a8:24:ee:7b:fb:
65:ef:3a:3d:63:89:17:c0:46:1f:60:3c:fa:32:80:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:C0:9E:02:6A:A3:67:35:34:C2:7D:2B:45:8D:87:25:07:4C:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:106::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:02:f1:fe:e5:a7:d1:5a:fe:1a:c8:d0:cc:ed:95:5e:d9:18:
0d:b9:68:8f:9d:14:61:08:e3:ec:5f:a9:14:16:0e:51:86:54:
be:80:1e:16:cb:49:e6:c0:f0:6c:4e:c1:98:b5:ec:a0:6d:80:
22:06:71:69:1f:27:35:46:12:31:33:28:6c:76:06:e9:a1:9c:
75:9e:65:77:41:e9:22:18:1c:0b:38:aa:67:6d:90:df:77:e0:
6e:88:61:9f:c8:d5:0d:5d:d9:4f:d7:d5:30:08:d1:f2:f5:7d:
9e:15:e0:ef:3f:a2:4a:77:a8:7d:ac:6d:18:a6:5c:40:be:1c:
c8:c7:b0:eb:2b:37:94:68:61:67:51:9b:a6:cd:bb:5f:24:a1:
78:85:db:ae:41:4a:3d:67:77:2e:c8:39:a7:a9:bf:b0:cb:85:
9e:23:65:f9:09:f9:d9:3a:b7:41:0c:2f:b0:92:a2:e2:9b:9c:
c7:ba:5f:2e:48:fb:9d:08:08:73:5a:73:02:d2:8f:eb:c7:cf:
fa:2f:4a:f9:8b:2d:6d:cf:ae:cb:9d:7e:e6:42:05:90:f8:a1:
44:15:b5:44:46:64:c8:de:cf:7b:bb:87:f5:8d:aa:cb:d2:a7:
a8:f6:5f:bc:a2:ef:95:85:a7:cf:09:3c:76:f8:dc:9b:89:ff:
83:51:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:24 2026 by rpki-client