
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa
File: d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa (raw, json)
Hash identifier: PnVkjIe2cnPQghVNY2tbQhJpRfRtzPYt9egxBzLE+g4=
Subject key identifier: CC:B8:9D:41:1F:21:84:CC:DF:9E:E6:40:F8:A4:34:F4:38:2A:F7:DD
Certificate issuer: /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial: 010D0C9F4328584D63948DC0F5115CAADE116500
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa
Signing time: Sat 04 Apr 2026 00:05:55 +0000
ROA not before: Sat 04 Apr 2026 00:05:55 +0000
ROA not after: Thu 02 Jul 2026 23:17:24 +0000
asID: 401106
IP address blocks: 2602:f40a::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:63:94:8d:c0:f5:11:5c:aa:de:11:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Validity
Not Before: Apr 4 00:05:55 2026 GMT
Not After : Jul 2 23:17:24 2026 GMT
Subject: CN=991b2299-d651-4e91-9a32-166735728906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:a3:a2:f6:e4:0f:97:84:4f:48:ee:4a:69:
52:8a:9f:2e:2a:41:18:21:fd:f0:59:16:cf:3b:e9:
fc:f6:0c:19:4e:57:f0:dd:b4:d1:c8:13:7e:46:e0:
5b:21:de:ed:78:70:1b:e8:63:d1:a7:d5:2e:8f:01:
06:38:05:8f:db:e3:02:76:5f:81:8d:cb:a4:27:ab:
95:f5:39:b4:e0:6f:b5:28:2c:14:60:86:b4:06:64:
00:16:ce:4a:06:16:bf:80:b7:54:04:fe:74:a9:aa:
2b:d9:73:21:ef:bb:d4:52:90:30:bd:ab:c9:95:82:
85:cb:51:2c:81:25:c5:5c:e9:59:55:9f:0f:65:4c:
c1:b9:4f:09:f4:6d:c5:cf:51:81:97:97:2b:45:16:
7f:fa:57:a4:c9:d9:e3:8e:de:4d:90:d7:77:43:db:
e1:3d:4c:d8:68:3b:cd:b8:44:50:9f:70:ed:ba:5d:
da:84:97:ce:af:80:30:7a:a2:0c:f4:3c:ae:2a:92:
6b:d9:60:e3:6e:2f:5c:8c:c1:ec:6c:55:a0:a8:c8:
e1:29:55:93:d4:3d:06:91:c8:96:92:9f:2a:d9:d8:
e4:c4:92:76:08:1d:38:5e:7d:7b:5c:1f:8b:f7:69:
93:e4:92:32:60:61:e5:f2:0a:5c:fa:eb:83:ba:37:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:9D:41:1F:21:84:CC:DF:9E:E6:40:F8:A4:34:F4:38:2A:F7:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
X509v3 Authority Key Identifier:
keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f40a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:3a:d5:c3:cf:46:85:fe:a4:c5:66:f1:02:fc:71:30:7c:4c:
2a:d2:3b:9c:d9:62:6b:0a:84:5c:d1:ce:f0:2c:02:41:7a:58:
30:d8:45:56:51:6b:ca:c0:54:f2:21:55:d6:fa:2a:07:30:49:
db:51:b6:bf:9c:3c:ea:5a:ad:b2:67:a7:6f:df:f0:87:96:cb:
ab:11:70:c3:ca:f1:99:a5:73:09:1c:1d:b7:82:12:54:5f:33:
37:b4:ec:46:21:ba:1f:f7:d2:b4:2f:8b:d3:6f:60:3a:e2:28:
d8:09:a6:52:c1:e2:97:22:bf:8b:5e:ff:d7:94:d9:2d:cd:a8:
3c:8b:b4:67:86:7a:b2:15:d2:74:61:c2:9d:aa:80:c9:ed:8b:
5a:69:ca:10:3a:f0:83:da:c5:88:cd:3e:b6:e4:dd:7b:30:b6:
1b:c7:3c:9b:8d:d0:94:e1:68:8f:16:79:24:3e:80:4c:60:73:
14:39:a5:6f:f9:ab:14:4e:d3:f9:df:1b:14:91:c7:5f:8d:71:
66:0b:06:10:fc:d7:77:c1:a1:c7:10:06:2e:9b:a6:8f:37:c0:
e5:61:5b:e1:a5:79:bc:a8:8e:ad:d3:b6:6e:58:0a:3a:2e:54:
e3:49:0b:15:ac:0a:34:1d:35:04:cc:9a:b7:c0:11:25:19:5c:
9c:ff:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:19 2026 by rpki-client