
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa
File: f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa (raw, json)
Hash identifier: k6XYP9teMV24q1XrvXSn8mNjG7sGjBDpTNjfQmLXnJY=
Subject key identifier: D2:6E:C9:C1:2D:79:B5:97:BE:4C:48:76:E1:37:23:75:5C:BE:2F:8A
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584CC7772358F879FAEA712F9CC0
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 16524
IP address blocks: 2604:85c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:23:58:f8:79:fa:ea:71:2f:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=4a60c83d-3272-4355-aeca-b92fcc758c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:73:b0:9d:b3:ed:9b:92:9b:d9:b8:cf:f4:
ba:7f:9a:08:cd:21:60:9d:3b:96:3d:4e:e3:e6:ed:
8d:c8:a6:0f:29:26:94:1e:33:9d:3e:24:c4:60:26:
a1:32:54:7a:4b:b3:34:a3:62:c7:a7:f2:f2:69:2e:
97:93:07:e7:e1:f0:4e:85:e4:8a:eb:9b:24:1a:70:
20:86:04:70:72:a7:86:2d:71:fc:75:20:3e:de:9a:
73:26:37:3a:24:22:fa:96:68:03:68:a4:57:89:6f:
06:d3:3a:ab:8a:81:eb:70:85:83:56:93:08:1b:fb:
0a:51:de:0b:b0:b0:dc:f6:23:43:2d:98:41:15:f9:
4b:1e:3c:34:6d:7a:32:7e:b1:44:3d:1e:67:c7:99:
e5:2c:2a:b4:cb:22:cc:cf:1b:eb:f0:e0:cc:ef:c1:
ab:d2:77:13:74:9d:f4:c8:3a:7d:99:b0:99:21:c4:
ed:29:cc:ce:dc:4b:01:f7:0b:55:3b:a0:cf:d7:96:
d4:2e:fa:86:f9:b4:f9:82:0e:2a:a3:d1:99:ed:8e:
ac:05:86:64:25:62:c9:06:b3:1f:8f:94:b5:09:cc:
34:f2:0d:15:f0:ad:6c:30:95:29:cb:4e:dc:70:9f:
97:03:b0:cc:d0:34:58:ea:8d:30:bb:bc:ac:04:41:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:C9:C1:2D:79:B5:97:BE:4C:48:76:E1:37:23:75:5C:BE:2F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:85c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c4:9b:3c:7b:d7:08:9b:4f:ac:4b:6d:5b:7c:e4:b6:c2:21:
7d:f3:d8:18:4c:c3:e2:7f:28:72:e6:99:a8:a3:5d:37:bd:63:
3a:bb:68:86:e9:ca:c6:5a:37:85:56:38:7e:27:9b:a4:6a:9b:
c4:3d:5a:f7:a7:77:a5:0c:ed:5e:00:53:0d:90:e1:31:d3:55:
ec:58:00:07:20:2d:82:2b:ce:96:87:f8:ec:1d:43:12:5f:4c:
3f:4f:f4:b0:62:72:18:92:43:56:83:48:c6:e4:50:36:ba:18:
79:75:40:a9:87:a0:a9:79:eb:e5:f9:63:30:af:11:09:d7:59:
65:25:20:a7:ff:03:04:d9:ec:08:40:ef:37:9a:6c:d6:2b:4d:
ef:2c:56:a2:e1:27:35:04:5e:5c:ed:4e:da:41:37:3f:a8:a5:
f7:bc:91:11:90:9d:12:4e:b8:36:86:3a:8c:16:51:19:e1:51:
a4:44:6a:ae:b1:48:39:74:7d:8e:3e:93:b5:ed:5e:d0:20:04:
e7:8e:42:fe:dd:58:10:91:b8:c4:98:59:aa:2a:e2:61:5d:ea:
f3:d4:41:81:19:16:12:e4:76:75:14:26:8e:c3:4e:95:b8:a9:
48:67:10:68:83:fc:32:22:54:d7:8a:9d:0c:0c:fa:d8:b0:1c:
3c:66:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:17 2026 by rpki-client