
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2eeb056d-461e-3c3f-888b-240597f7e68f.roa
File: 2eeb056d-461e-3c3f-888b-240597f7e68f.roa (raw, json)
Hash identifier: sWDv9qUm0ERjrRlTST1wTdLc88QiiXsbq1FQlUCuexs=
Subject key identifier: 3A:20:7B:21:77:CA:C9:9D:45:F2:E3:6E:B8:E2:32:F9:02:DF:8E:44
Certificate issuer: /CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d
Certificate serial: 010D0C9F4328584D60E5172F8242B92E62827DB0
Authority key identifier: 7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2eeb056d-461e-3c3f-888b-240597f7e68f.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 22168
IP address blocks: 2620:24:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:17:2f:82:42:b9:2e:62:82:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=d10a0625-ca95-4b72-8641-3da9bf2c99fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:e8:a8:05:1a:24:a5:f3:d9:50:9f:b8:b5:
51:a1:ed:3e:4b:de:4d:e2:49:a4:45:c6:2b:7c:4e:
29:f5:e0:53:5b:3a:e9:c9:df:a7:9b:d8:ce:a5:a7:
19:17:b3:6b:28:c8:ed:b6:8a:bc:98:e7:c9:f6:a7:
9e:73:db:c9:6a:3e:50:b8:f7:48:76:1f:25:11:d7:
8d:93:63:33:12:b3:d1:c8:a6:32:81:61:4c:2f:26:
f5:b2:31:f1:17:9a:b6:34:c8:2d:e2:29:c7:1e:b4:
c1:52:bb:91:ed:37:0f:ae:08:66:16:fa:d2:10:1d:
9c:fe:4e:e9:7e:30:09:b4:58:9e:7d:d4:7f:9b:d1:
15:28:19:f7:59:3f:de:b8:5e:e8:cb:d3:58:03:95:
a8:14:3a:19:a3:3f:80:e4:ab:f4:1b:36:83:d2:51:
fb:ad:51:23:4a:a7:6c:53:16:99:77:80:7f:d7:b3:
d9:68:bf:d7:a0:8e:15:94:1b:ba:4a:16:5d:97:c7:
23:8d:db:63:7f:b9:2d:b8:41:c5:7b:22:fc:cc:56:
65:4e:65:8e:7f:cf:0f:51:f9:a1:7b:ad:94:59:ed:
db:6a:4d:84:73:05:0f:c2:a2:1f:f8:f4:70:e6:6d:
15:9c:5a:7b:46:22:3e:1f:14:38:48:3c:a9:b9:a4:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:7B:21:77:CA:C9:9D:45:F2:E3:6E:B8:E2:32:F9:02:DF:8E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2eeb056d-461e-3c3f-888b-240597f7e68f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl
X509v3 Authority Key Identifier:
keyid:7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:24:c040::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:13:59:e0:9c:e3:d9:99:80:fb:b1:26:4f:af:f0:5a:ea:b9:
0d:34:fa:92:6d:bd:64:ed:6c:e9:66:ad:8d:d2:e5:fd:00:05:
4c:89:b0:39:af:71:de:83:f2:15:f3:8f:aa:dc:67:51:22:74:
a7:49:23:e0:ef:b3:5c:1b:21:ec:a6:7c:ed:e8:92:4b:1d:a2:
be:42:35:41:0c:85:79:27:00:30:72:d8:0f:f7:fd:83:3b:78:
4b:d0:9c:c8:d8:7b:12:23:7c:2d:41:1a:c5:ff:6b:bd:c5:bf:
66:b2:25:13:f9:03:11:17:f4:bd:89:90:ef:9b:8e:93:68:7b:
3e:3c:3f:be:35:77:4a:72:bc:72:30:db:a9:1a:40:65:a8:36:
d5:1e:83:54:f8:9c:62:27:5b:b8:a3:b5:5d:9f:cf:7c:c1:57:
d7:9f:67:26:d3:aa:d9:0f:16:d0:d7:bc:2c:ff:89:7e:f1:49:
ee:20:0b:a6:d4:2e:d1:bc:31:aa:36:8b:ee:85:b8:ae:de:86:
c3:b6:a8:62:4e:b1:24:9a:bc:77:db:63:e3:9f:34:fa:fd:a7:
23:ef:24:d7:37:12:17:8e:dd:ce:ad:c1:c7:d5:b6:2c:0a:bc:
c1:ed:84:74:03:0c:bb:19:ba:42:e0:91:f1:32:10:6b:e0:d8:
e6:98:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:18 2026 by rpki-client