
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa
File: e0ca5f44-c099-3884-be7d-18399124b7ca.roa (raw, json)
Hash identifier: BaKIBh3ijSwh2tSkMcpHjmCebqNPLjAukDQegQQ8zu4=
Subject key identifier: 02:AC:61:81:91:80:99:00:EF:A5:A3:EC:64:14:65:13:BF:E6:E8:0E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D7470189026D6344703B73F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397228
IP address blocks: 2620:74:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:70:18:90:26:d6:34:47:03:b7:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=474448bc-3dee-40e9-bd80-2bad71008dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:d0:06:dd:b5:30:31:3f:69:54:ed:aa:02:
20:59:09:2d:45:3d:01:bf:54:48:f3:0f:be:d9:42:
49:ab:07:73:62:4b:cd:7a:6f:07:20:e4:f6:c8:85:
60:41:31:85:83:f5:b0:f9:7a:44:55:7b:65:4d:0a:
e4:6e:62:3a:99:15:0d:59:b0:6c:c6:2f:b4:d6:c5:
ee:4b:dd:0a:5a:17:66:8f:16:06:e3:09:54:fb:f0:
0b:73:f0:34:09:03:32:54:1a:94:92:a2:57:3d:6c:
74:21:a1:2a:da:38:69:a8:42:11:c5:33:6c:36:21:
c0:c3:d3:27:bd:b0:2a:bd:4b:fd:9b:76:9e:8b:c5:
45:cc:24:a3:f0:b2:a6:c2:12:ee:bd:f0:49:af:0e:
1b:a4:75:d4:6e:aa:e4:76:fa:53:54:ce:12:9d:be:
c1:2e:cc:49:0c:50:1e:e6:f3:ff:db:b6:b6:54:fe:
cf:1d:38:b5:12:5b:5e:07:e6:0e:d6:b4:62:d4:07:
bd:11:02:ea:56:39:1f:cd:6a:e3:79:af:c9:03:55:
6c:b4:70:98:1e:70:cc:ec:09:29:fb:96:fc:95:ac:
e1:94:9d:2b:08:df:be:73:5d:2d:6a:5e:08:7e:95:
79:29:c1:30:03:03:7e:f5:6d:b5:a5:0e:be:e6:70:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:61:81:91:80:99:00:EF:A5:A3:EC:64:14:65:13:BF:E6:E8:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:97:cd:87:c6:33:ba:dc:1a:cb:58:71:4b:07:1b:f3:03:39:
36:75:62:70:4a:e9:a5:de:36:89:3c:a0:3f:36:79:cf:35:b1:
3b:2d:e2:e0:a8:25:7e:41:f5:ef:8e:1d:64:35:8e:e0:42:97:
52:ca:64:74:27:d5:9b:98:91:07:64:6f:04:bd:07:98:d3:a8:
01:55:06:27:be:0f:29:7b:5a:70:76:97:ce:12:a1:1e:53:a8:
e7:a3:72:70:97:27:b4:25:6d:5c:fd:9a:87:89:9b:70:5c:5f:
6b:61:09:60:cb:89:80:da:4f:9b:d5:60:8e:e9:d4:0c:24:95:
1b:9e:29:78:3f:54:21:2b:ac:0e:8d:19:20:d4:75:2d:3a:dd:
2c:39:04:3c:fd:84:d0:94:35:e5:34:fa:b7:6d:5b:94:5b:b8:
1b:4e:6d:16:1f:fc:e1:56:d7:d2:3c:0b:42:96:cf:1f:6c:02:
de:93:bf:ee:60:45:ec:1c:5f:7f:77:b9:81:d2:2d:0e:4d:a9:
f1:1e:70:7c:a5:14:db:87:61:78:ef:4b:77:c0:52:77:2e:9a:
82:60:82:be:56:ba:0a:2a:75:61:35:e4:6b:a0:dd:93:8b:39:
09:14:cd:14:84:90:91:68:7d:31:7c:43:48:c3:88:80:26:d9:
2e:66:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:22 2026 by rpki-client