
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
File: 4a943796-c7ae-3193-be9d-cc79adb0f56b.roa (raw, json)
Hash identifier: RGJ4DcWMDU8HDPFtbgTOam7wO42azaATl7bsHP+nrUk=
Subject key identifier: B8:1A:B5:8C:0D:D3:BD:F9:D9:AD:D6:0D:C7:D3:8B:89:36:1A:D7:5C
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584D6AAA8252DB845E3EF2F366C0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 200728
IP address blocks: 2602:f9f6:840::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:82:52:db:84:5e:3e:f2:f3:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=1c494929-2b4f-4db4-b6e1-08e67d795338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:fd:55:be:cd:1a:6d:bd:98:53:e2:f5:49:
d2:c6:b2:fb:e8:af:a9:ec:0d:cf:fe:cc:87:b8:b7:
d0:77:e8:ce:51:f8:36:10:98:cf:1c:6c:30:10:bb:
f3:2c:7a:13:3d:47:59:02:cb:ab:75:80:59:2f:a6:
72:39:ee:f2:df:95:8e:98:b0:f3:7b:72:d8:79:67:
5d:51:be:07:20:10:81:a5:16:43:63:5f:eb:5e:f3:
ba:92:e5:97:78:a4:7d:7a:bd:ee:6c:39:af:24:7a:
81:d1:f8:79:68:f7:12:b1:7f:1f:c7:cd:c2:0c:48:
10:b7:07:09:33:91:ec:21:ff:ac:c1:e5:bb:33:58:
b4:6a:83:e5:8c:5e:86:96:3b:3a:d4:f2:87:81:f6:
1f:bd:4e:4e:10:cb:b1:48:65:56:fa:4e:b4:28:64:
15:52:98:61:d3:1e:5b:fa:79:a7:14:85:32:24:7b:
87:2b:9c:be:78:5d:e7:7d:59:8d:f6:e7:21:da:23:
c5:b1:91:55:0f:3a:90:44:d1:ce:e9:1a:12:d5:5b:
8d:7c:00:77:d3:53:a0:b9:dd:60:59:41:5c:ae:fc:
30:3b:79:40:da:1a:d1:06:5b:55:1c:21:59:56:78:
16:a0:7b:e5:e7:0e:0d:c8:73:ee:a6:af:41:fe:a4:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:B5:8C:0D:D3:BD:F9:D9:AD:D6:0D:C7:D3:8B:89:36:1A:D7:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6:840::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3b:f1:f2:0b:ac:48:52:de:97:be:c6:5f:f3:5b:11:db:72:
25:49:67:34:15:26:12:12:d9:be:5c:40:0c:98:81:5c:4e:5e:
49:fd:bd:c3:96:31:14:48:f0:dd:d3:a6:83:6a:e9:4d:4e:ff:
a4:c0:4b:75:c7:c9:fe:d1:64:06:51:f0:26:92:cd:6d:bd:64:
13:32:cb:d1:c3:e8:ca:60:1e:a6:70:d8:ad:00:a7:52:b1:b6:
dd:10:91:1b:76:04:fb:d7:cf:9c:8d:af:7b:81:25:d6:17:ec:
31:c3:3a:4f:55:3e:ce:00:cd:51:3d:00:9f:00:e8:23:54:e1:
e4:6d:ec:32:5d:b5:a7:62:3c:5e:22:a7:bb:65:2c:e8:87:3f:
95:73:d0:31:c8:e5:ac:ce:4a:c9:c8:7d:8c:f4:c6:99:50:c0:
5b:f1:e7:5d:ab:6a:c5:bc:d4:fa:98:84:42:c3:b0:50:6b:4b:
52:ba:1b:48:87:e6:b5:60:8c:a3:72:66:c4:70:4e:7a:2a:cd:
be:b4:fc:87:e7:ad:11:a5:2d:66:5b:2d:33:19:c0:77:d3:61:
4b:8e:1d:78:21:5b:60:87:6b:95:f2:ff:71:e6:24:c5:4d:1a:
bb:22:09:00:b5:4c:a4:66:33:48:79:15:c4:27:7d:6c:fa:f6:
ae:a0:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:16:26 2026 by rpki-client