
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa
File: ffaf171b-accf-3357-80be-1cc3a9494500.roa (raw, json)
Hash identifier: GMXciSaTdqiyYZqGj0pVtF/0ORI8P09X+Mv0OKWYutk=
Subject key identifier: 1B:0B:2E:93:F0:FD:2E:AB:72:63:A9:2A:B8:32:7B:4D:24:F1:3B:74
Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial: 010D0C9F4328584D86954E63B6316F44E6B47600
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 32806
IP address blocks: 2604:9900:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:4e:63:b6:31:6f:44:e6:b4:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=7fdd8f6a-7e4c-4cd3-90ab-a05331a0a761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:30:8b:8b:0a:16:34:4a:23:08:0a:64:af:
aa:9e:41:c6:b3:4d:04:0a:22:b8:00:53:64:0c:63:
11:42:c0:f9:57:86:02:e5:d9:3d:c2:2f:42:3d:1f:
7f:a6:58:f6:fe:95:d2:f9:f5:eb:33:52:51:0f:ec:
19:52:8e:8d:85:ec:6c:41:72:27:0c:95:f3:db:bb:
df:bc:a9:b0:1e:23:b3:8c:de:2c:f1:9e:e9:fc:81:
be:28:bb:ab:a0:22:43:06:53:55:3b:06:af:fa:ff:
2a:ce:c7:44:21:01:ad:98:89:99:0c:b2:82:8a:78:
7a:b9:c6:92:78:14:4c:5a:2a:77:b5:f5:65:18:17:
15:ab:83:5c:8f:e1:2c:bb:e0:35:c8:62:8d:b6:f8:
52:ec:7a:03:21:f8:45:14:d3:36:ab:47:aa:d2:8c:
1a:88:83:ec:26:c7:08:24:3b:44:2a:10:e1:15:6d:
2a:75:cf:5b:37:80:1e:49:aa:a0:c6:1c:45:82:95:
ba:25:a7:67:ff:67:36:fb:eb:3d:30:b7:03:03:b0:
e0:35:9d:b8:f3:44:45:de:a7:f1:ab:02:84:39:dd:
e5:c4:e1:5a:4b:0a:4f:cc:16:72:97:0c:e1:86:92:
1c:34:ca:fb:0b:8c:b5:4f:0b:24:77:8d:b4:6f:88:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:2E:93:F0:FD:2E:AB:72:63:A9:2A:B8:32:7B:4D:24:F1:3B:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
X509v3 Authority Key Identifier:
keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:9900:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:f9:02:19:d3:e6:d0:ff:c8:36:d1:42:df:f1:60:ac:94:7c:
8f:f5:47:8f:05:e1:aa:74:6a:25:3e:d6:ee:fe:8f:f3:90:94:
74:1e:70:18:91:45:05:33:30:7d:1c:3f:ab:83:d7:f6:00:0d:
44:ee:37:48:f0:b9:a7:75:e2:c7:3b:d3:6e:11:9c:39:57:bc:
e3:8d:3b:9b:1f:bd:1a:ad:7d:f2:66:1d:db:d3:38:8b:14:64:
9c:d8:4d:8f:7f:a4:e8:b1:95:ba:42:dc:7a:e8:47:ff:b4:34:
61:90:f6:ea:0c:a6:0f:38:ab:80:2e:3b:e5:02:1e:22:31:80:
e2:24:5d:8a:f3:2d:1a:36:04:f9:5d:07:6e:2e:56:35:fe:84:
f9:9d:a5:8d:82:7b:a1:be:39:3e:1e:3c:76:c2:93:c3:17:60:
7a:7c:79:e1:ad:0e:2d:18:45:cc:cb:0e:69:99:bd:78:41:21:
6f:fd:30:5b:6d:ba:9f:58:d9:32:43:00:47:1a:e6:b8:1c:d2:
1f:01:fd:8a:c9:5e:98:9e:6b:f3:67:2b:e1:85:82:0d:5c:fa:
53:61:d4:c1:ca:3b:1f:0f:ea:2d:3b:bf:f5:71:39:7a:44:29:
64:f5:6f:32:99:fe:6b:ce:c1:e5:fc:9e:29:50:02:70:0c:4f:
b7:14:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:46 2026 by rpki-client