
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa
File: 9a6e5ea9-001d-3051-ab27-be001bbea162.roa (raw, json)
Hash identifier: 4uuarZZzTeX5OVij4BJbEgLvUFoU2BHSkBuhac5dWvc=
Subject key identifier: F8:41:FC:8A:AA:30:33:40:3A:9E:8A:ED:43:30:2F:81:59:90:B0:B1
Certificate issuer: /CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
Certificate serial: 010D0C9F4328584D60A9BEA8A0A62F6629FD3E80
Authority key identifier: C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa
Signing time: Thu 02 Apr 2026 23:01:11 +0000
ROA not before: Thu 02 Apr 2026 23:01:11 +0000
ROA not after: Wed 01 Jul 2026 23:01:11 +0000
asID: 402347
IP address blocks: 2605:af40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:a9:be:a8:a0:a6:2f:66:29:fd:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
Validity
Not Before: Apr 2 23:01:11 2026 GMT
Not After : Jul 1 23:01:11 2026 GMT
Subject: CN=cc64f27d-d785-40ef-ac4d-d2d9bb02d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:26:45:5b:31:5f:65:a5:dd:a8:45:71:d6:
9b:0e:0b:8a:c7:53:31:20:63:9e:f5:19:5e:8d:c2:
7d:4b:28:44:b8:82:bb:91:4b:ad:92:1a:fd:98:f1:
60:98:fe:44:eb:54:a8:f6:87:aa:58:8f:2d:9a:d1:
8e:fc:56:55:94:f9:c2:c1:3f:2b:dd:dd:6a:49:79:
db:f9:7d:e5:c5:a5:7e:65:9a:e1:95:fa:34:6c:1c:
a1:d8:ab:5a:cd:a1:77:3b:c1:58:ea:ee:f1:6d:81:
8d:92:42:cd:15:4d:8a:18:eb:3e:21:7b:e5:79:55:
c3:9f:e1:a7:d8:7e:0b:db:f7:21:2e:cb:87:ad:2e:
9d:a1:57:10:fa:ee:e4:1f:06:ac:b9:e5:ac:fc:07:
54:06:05:37:27:0d:72:26:8d:af:3d:e9:4d:7b:e4:
ec:0a:98:73:5b:6e:9e:f4:ec:fa:45:e4:07:53:0b:
4d:c5:ef:b2:ca:dc:91:37:91:56:75:40:e5:8f:ab:
22:2b:4f:e3:76:33:ac:1c:d8:e1:e3:ae:10:86:d7:
10:7c:74:3e:32:36:71:bf:a0:c3:c5:82:d6:5b:72:
1a:92:dc:d8:bd:94:ad:91:4c:c7:7b:d2:58:97:73:
cb:99:e7:15:42:7c:81:de:da:24:78:26:bc:ec:88:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:FC:8A:AA:30:33:40:3A:9E:8A:ED:43:30:2F:81:59:90:B0:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/9a6e5ea9-001d-3051-ab27-be001bbea162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl
X509v3 Authority Key Identifier:
keyid:C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:af40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:89:28:95:4f:1c:0a:8f:d0:4c:e8:ef:7b:ee:14:d9:fe:cd:
0f:3c:c1:13:07:a3:a6:51:5c:f1:8c:1c:ea:dc:0c:2a:b4:c9:
0a:01:9f:46:96:c5:bd:5b:20:c1:f2:06:85:6d:22:00:cd:ea:
57:01:e0:0a:91:42:5e:01:49:0d:4c:84:ac:47:2b:7e:c7:fd:
35:9e:40:35:87:27:4b:04:54:97:ba:08:43:a3:d5:dd:0d:6e:
45:ad:08:8f:a2:13:84:a3:ef:e8:9f:b8:a0:04:7f:00:71:b1:
f7:4d:41:eb:c3:5e:3e:a1:d0:01:64:b7:fd:8f:2b:a4:e4:f0:
1d:f5:a5:78:d9:cd:d0:61:ef:fd:c4:f2:14:95:7e:b3:b0:8d:
25:3b:86:2f:37:e5:f0:85:4a:a7:50:f3:db:5c:6e:04:f6:da:
0f:91:47:05:51:53:45:24:bd:be:54:34:8c:67:3a:fa:21:75:
4d:bd:45:20:46:6a:46:fc:1b:6b:41:d0:49:89:21:76:a4:67:
ca:ba:0b:be:1e:11:6c:c1:38:1a:89:8e:72:79:e2:70:d4:0d:
03:ad:e1:26:66:e2:3a:6b:d9:28:ea:2b:34:6c:10:81:cb:c9:
66:a1:a5:00:fb:c2:80:e4:ef:26:71:47:b1:c7:75:2a:41:1c:
fd:93:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:44 2026 by rpki-client