
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa
File: e590c5f3-0b99-3bbf-aa95-e708df65de70.roa (raw, json)
Hash identifier: A1ciZJ1rtVqXwzCd11ICJXkYfR5bKp0WlQnfbz2msGk=
Subject key identifier: AE:E3:DD:70:3C:9E:56:50:A8:70:08:40:B6:2A:4F:14:68:32:CF:CF
Certificate issuer: /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial: 010D0C9F4328584D571FB4A6C5611F601FEBCD00
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 30671
IP address blocks: 2602:fa45::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:b4:a6:c5:61:1f:60:1f:eb:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=60cd61af-e952-491d-a3b1-685e2423bc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:27:c8:f6:27:42:97:89:a9:38:51:62:00:
f2:aa:18:b6:dd:4b:07:1f:6a:ce:93:7c:59:c5:23:
11:bb:9f:fd:d9:8c:1e:af:36:ea:96:33:3b:f2:cc:
38:be:e7:68:a7:7f:13:de:71:9a:e5:28:d0:f0:a1:
a0:31:ab:64:b5:e1:48:da:bf:71:40:8f:5b:65:31:
47:96:0f:9e:83:0e:bd:c7:90:c7:fa:3a:b8:83:ec:
c8:ef:74:97:6c:08:65:cf:43:c4:b3:7b:68:d9:63:
2d:c9:7d:1e:ab:0b:38:35:fa:8c:50:43:ae:11:7e:
99:ab:cd:8a:93:94:4d:37:c7:85:d2:70:a1:6a:1f:
f8:07:1e:ba:2b:08:bf:3a:70:f7:31:c1:ad:b9:9f:
d4:2f:c8:52:6c:e8:1c:de:fc:d4:48:86:58:4b:8e:
83:fc:a5:db:d4:93:73:8a:a6:dd:16:f7:f9:f1:cc:
8a:4c:06:33:f6:bc:7a:9a:a6:50:35:90:5f:b7:9d:
78:28:a3:0a:1c:20:69:b0:56:6b:20:d1:a6:22:7b:
e2:c0:9e:eb:ee:d6:6f:01:c4:4c:01:82:44:0e:de:
91:4e:3e:ab:21:24:5f:39:df:2f:03:6e:fd:ae:ea:
f9:f4:20:d8:2c:05:7f:8f:9e:9f:b8:54:1b:8b:9c:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E3:DD:70:3C:9E:56:50:A8:70:08:40:B6:2A:4F:14:68:32:CF:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
X509v3 Authority Key Identifier:
keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa45::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f4:fd:8b:a5:4d:5f:95:56:b5:9e:51:1a:4f:49:93:42:40:
f0:d8:f5:16:46:7c:5c:8b:2d:26:dd:c3:6e:7e:40:4b:4e:b5:
54:80:38:5c:7c:b4:ca:78:ea:5b:bf:2f:5f:ad:17:37:f3:ff:
bd:cc:4e:e8:83:87:56:2b:f9:ce:00:d1:8d:13:13:a4:85:4c:
cc:7a:f6:39:47:28:c0:ca:2a:00:19:e4:43:f9:0d:e1:34:88:
d7:88:b7:1d:52:21:c4:9d:69:8d:cb:12:7c:2b:0a:64:17:b7:
b2:b8:80:74:f3:4f:88:3d:c8:bc:4e:23:85:fb:a8:3a:45:30:
89:98:95:ef:e5:ab:62:2c:71:6c:e6:c7:67:4e:2c:5c:a5:0d:
84:ab:43:78:b0:41:ad:23:9a:f2:5d:26:05:b8:7f:6b:08:3e:
53:a9:50:a0:f7:40:51:12:ec:a4:b5:b4:08:64:bb:ef:1e:3a:
64:32:ce:09:ce:02:59:12:1d:1d:e3:aa:83:2f:6c:23:a0:f0:
26:ba:1c:c0:1b:80:c3:05:ea:07:5e:cd:53:f2:0a:9b:d0:7d:
3c:2e:ce:f1:0b:0b:16:d9:0e:27:3b:b9:2c:37:85:b2:9c:2a:
08:e5:39:e0:b9:7e:a3:cc:25:29:cd:2f:69:69:db:7f:c1:03:
78:3b:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:44 2026 by rpki-client