
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
File: 289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa (raw, json)
Hash identifier: 9/UO3d/1NqX0v3gtcmifsiEulUMsNUqJbTWS34KztwM=
Subject key identifier: DE:D2:AE:B4:BE:30:30:6F:39:41:83:0A:1C:3D:A6:8B:43:B8:B2:2C
Certificate issuer: /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial: 010D0C9F4328584CB121B38CCE2569941E993D80
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 20148
IP address blocks: 2001:5c8:f7fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:b3:8c:ce:25:69:94:1e:99:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=fce19ff7-1a86-41b4-b1ef-e3a3de5683ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:01:89:d9:43:ff:48:f5:be:12:84:48:59:ec:
cb:7e:c6:8c:e1:5b:3f:56:5b:eb:3b:40:2f:df:83:
f2:75:20:96:e6:d6:0e:cc:4d:8d:58:27:75:e7:7a:
c2:37:60:28:f6:98:ec:65:9a:fc:83:93:02:5c:06:
8d:16:d2:99:bd:68:e7:16:3d:4f:bc:6a:fc:f0:7d:
5c:11:37:e1:2f:01:45:55:08:fe:a8:eb:15:e5:2f:
ee:21:ba:ac:44:a9:d9:4f:4a:96:88:75:c7:36:9d:
cb:c3:92:b7:c9:85:eb:a5:f1:e5:54:93:48:71:2b:
81:74:1c:46:89:ca:91:b0:c6:1f:f1:9b:39:b9:02:
74:84:e0:cb:70:fd:de:b2:a7:4b:a7:35:33:7d:fb:
4e:56:ec:30:c8:27:ef:21:ea:02:6c:49:95:e0:49:
c8:49:77:2d:48:eb:c3:2d:f9:e4:41:8c:54:04:f7:
e9:29:5a:39:0b:17:b6:12:5f:04:87:3f:1d:d3:b7:
48:27:5f:8c:4e:8d:ea:b7:3e:99:cc:2e:e8:aa:bb:
99:50:a3:51:07:20:b2:5d:43:97:86:ef:17:b8:69:
bc:c7:1e:26:ac:45:1b:01:5b:6a:fa:5f:55:2c:d7:
62:20:28:94:a1:f7:a9:f2:79:5a:73:5d:75:16:a2:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:AE:B4:BE:30:30:6F:39:41:83:0A:1C:3D:A6:8B:43:B8:B2:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
X509v3 Authority Key Identifier:
keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5c8:f7fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:64:f4:cb:8e:5c:d2:a1:0e:3b:28:00:6c:c3:78:6e:1b:d4:
b0:6e:2a:e0:2e:87:43:0a:87:15:ca:b4:5d:b9:e4:bd:cf:de:
a3:c6:70:b8:65:85:63:be:7d:07:b0:fe:2c:43:d9:1f:6d:a7:
8b:e5:48:f0:ef:ee:2c:1e:6a:e2:b3:b0:0b:fb:9f:49:dc:e3:
6f:a7:73:d0:cd:4e:33:78:a0:17:55:92:36:b6:d9:19:b6:4a:
5f:3d:67:17:6c:25:e8:a1:23:11:02:f0:b0:1a:38:13:3f:01:
62:13:ab:30:06:c3:04:0b:04:4e:8c:aa:1d:ad:e6:f6:6c:a5:
21:51:f6:23:1e:dc:0e:35:37:06:85:70:9b:b0:98:61:bd:e2:
87:df:aa:44:15:c6:94:46:f7:2e:74:8f:6f:fa:ce:53:68:fc:
23:a0:5c:33:b6:58:69:eb:bf:7f:06:53:65:76:e4:2e:dc:6f:
cb:74:64:e8:77:4c:a1:2f:03:78:83:23:93:f6:85:a6:db:12:
86:03:71:09:67:2d:9b:ae:14:48:50:07:b3:15:84:c4:88:e8:
e6:3c:e4:36:13:6d:cf:c7:be:ce:f0:a5:01:15:36:2d:15:72:
8b:50:85:6c:cc:15:d0:03:de:09:e6:0f:20:1f:43:14:23:da:
dd:06:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:53 2026 by rpki-client