
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa
File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json)
Hash identifier: CRt2YtYQagop8ViJCJ22ht/xN22V5JiOBYnK/qMQ5xU=
Subject key identifier: FF:35:4E:A7:44:77:BD:09:96:09:B0:2F:82:64:55:C0:F5:51:8A:FC
Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial: 010D0C9F4328584CC7774728FC07F03B8DB9B840
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 394056
IP address blocks: 2607:3640::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:47:28:fc:07:f0:3b:8d:b9:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=7102a16b-92d0-4434-adfe-a6c3ea2ba693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:dc:6b:69:dd:25:9d:86:45:48:ba:a7:a2:
87:90:87:07:c6:10:a2:a9:2c:ff:f5:db:7f:0f:85:
bf:7c:3f:d9:c7:d7:6e:09:cf:04:36:e6:25:d0:79:
b2:6b:85:c6:97:e1:bb:7c:07:3d:de:08:ee:cd:89:
3e:04:96:6f:68:83:5e:ce:c2:f0:33:bd:ed:6b:49:
43:1d:62:64:3c:d8:fd:00:41:66:dd:c8:4f:34:5d:
f3:9d:6b:19:c7:15:fe:9a:12:2d:fd:2e:5f:e6:02:
b9:84:cc:92:20:d7:ab:74:40:29:0c:2e:72:d5:18:
f3:1a:66:ce:e3:f8:9c:b5:44:55:8c:39:c1:8c:52:
0a:4e:25:2d:ef:3f:b2:db:6f:d5:38:cd:d1:91:13:
4c:8e:38:80:8e:47:3b:cb:33:54:ba:28:31:97:1b:
cb:1f:ad:4a:57:c9:47:c3:99:90:82:82:b1:8d:bb:
30:98:57:71:ac:db:8f:53:95:e6:1c:8f:45:0a:cc:
d6:79:fa:39:27:75:57:72:06:0f:e0:8d:dd:cb:09:
4a:9a:02:7e:79:38:af:40:72:6a:18:d9:80:3b:b9:
f7:be:52:0c:dd:07:a0:76:6d:c1:61:2b:00:5d:bd:
c3:b5:bb:0c:da:31:47:96:6c:ad:d4:3c:bc:55:e2:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:4E:A7:44:77:BD:09:96:09:B0:2F:82:64:55:C0:F5:51:8A:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
X509v3 Authority Key Identifier:
keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3640::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:99:f1:4f:5c:90:cc:ac:84:aa:6b:18:05:08:81:02:6f:3e:
1a:52:e6:d4:7c:c7:d4:ae:da:69:86:21:92:77:3d:5b:ef:b2:
8a:eb:4f:43:44:fb:38:e3:b5:13:ef:9c:95:83:be:63:1e:2f:
bd:4e:78:42:7e:8c:5f:7f:fb:41:0e:2d:e0:87:b7:28:91:64:
1e:04:3c:20:4f:f9:bf:4a:60:1c:af:09:4c:b2:ef:02:1a:8f:
20:6a:d1:97:77:b0:16:f1:be:24:a9:0d:df:e8:ef:7c:3a:f8:
8b:f8:17:78:44:3c:b3:61:b2:cd:29:d8:15:c3:3b:9e:48:95:
14:44:be:da:23:33:56:0b:4e:57:63:80:82:00:1a:d2:b6:8c:
d6:84:8d:39:f1:ea:72:49:ad:5f:bd:03:10:f5:29:af:32:cb:
78:53:1a:e7:b9:5e:ce:2f:85:df:9c:2c:0c:16:39:2e:17:de:
2a:f3:7c:f0:ff:9f:6d:fe:66:55:3b:2c:63:de:d2:81:35:c9:
ad:42:82:d1:00:28:3b:30:62:85:2a:9f:2e:d9:f3:1d:48:19:
79:c2:77:aa:c3:2c:65:0b:61:df:f8:99:96:9b:ce:28:29:12:
4e:08:c7:83:1c:e7:ab:4c:66:27:a6:69:62:37:c2:87:0f:7b:
bc:54:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:14 2026 by rpki-client