
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
File: cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa (raw, json)
Hash identifier: jXtabLjiswuGB0PitgIfTGscvp/Otqq0bUP1OZBbiYo=
Subject key identifier: E3:A1:E3:7D:0A:BF:AC:C9:10:0D:A9:5D:67:09:DA:8D:E7:13:FF:CF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D7470179B1F439CF3EF06CD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397241
IP address blocks: 2001:503:e239::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:70:17:9b:1f:43:9c:f3:ef:06:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=c9d8b3ad-f8f7-4542-8695-6654d9184120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:6c:7f:85:d5:5e:d9:5e:be:c0:41:0a:e3:
12:4b:92:5d:f1:c7:ba:85:22:27:fc:e1:c2:c0:8d:
61:7b:9b:e3:8b:b6:5f:ac:49:b8:30:83:9d:2c:7e:
ef:b8:4c:07:2c:5e:b9:3c:31:60:4c:c5:2d:d0:c4:
a4:4f:2a:48:b5:de:af:eb:c0:9e:b5:fa:a0:e8:eb:
1b:08:43:92:80:ab:bd:1c:bf:c6:ac:77:16:b7:db:
69:ff:c5:f5:65:bc:e7:ff:c6:ee:59:91:3d:19:de:
e0:d4:e4:1d:44:94:ce:0b:7c:42:b0:ba:57:0f:5e:
dd:e1:b5:5c:78:b5:f3:29:7a:d1:b9:ad:01:ea:c2:
98:2d:68:2a:de:35:72:ec:5b:42:6d:25:5c:2a:be:
90:14:63:78:39:08:cf:47:01:ed:26:88:f8:00:8a:
eb:45:d8:66:57:7c:bb:46:aa:5f:69:d0:dc:e8:2a:
92:16:c7:24:c2:04:73:00:66:16:1b:73:70:29:f8:
e5:c7:e3:c7:2b:84:85:4e:88:4b:de:b9:43:bd:80:
d9:6f:81:09:cd:e8:0a:50:54:5b:6a:8b:ed:42:fd:
ed:07:1f:09:42:18:37:04:69:f2:a0:5c:ee:40:60:
eb:d1:f7:63:7c:77:cb:58:c6:f9:6b:83:6b:14:17:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:E3:7D:0A:BF:AC:C9:10:0D:A9:5D:67:09:DA:8D:E7:13:FF:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:e239::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c6:e1:3f:80:66:69:bf:02:49:9d:a8:32:2e:ff:56:e0:f0:
94:ef:c9:ac:40:80:2c:2a:96:ee:58:f3:73:72:43:69:d0:90:
a7:1a:93:e8:be:de:e4:59:4c:9c:58:a3:7f:21:f6:cb:1a:33:
eb:dd:7c:06:7f:c6:2d:2f:e1:d1:a4:22:8f:69:cd:5a:78:08:
15:7f:e8:24:55:0e:e8:d5:d1:fe:c2:8f:30:06:d3:72:71:ed:
50:76:30:e0:18:b8:54:3a:fa:b4:ca:36:e8:ff:80:56:ee:18:
4f:39:0a:fc:ef:23:37:7c:19:44:c2:b1:7e:68:2c:32:b1:e2:
e6:9e:85:93:06:2a:42:e3:30:2e:9e:ca:80:68:2a:16:59:4d:
fe:02:76:73:28:c7:91:70:0e:f6:04:7a:38:a7:12:b9:aa:e7:
55:0f:d1:73:ba:5d:f3:e9:f2:18:4c:e1:f9:f4:28:e0:c3:0c:
2e:d6:d4:79:ce:2a:ed:5a:a8:58:ca:5e:ae:53:b6:e0:46:6d:
70:49:1d:c5:17:27:a9:e4:3c:6f:d6:d1:b3:60:01:58:3a:94:
f0:8f:a6:e3:99:16:5a:df:fa:0a:ea:ee:1f:5c:ae:a5:db:25:
29:e6:12:ab:b8:82:19:46:7b:55:cd:5f:fb:ea:2f:d1:8b:56:
3e:d6:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:05 2026 by rpki-client