
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/006f3b36-6e4a-3ec2-aba8-824d7cb95414.roa
File: 006f3b36-6e4a-3ec2-aba8-824d7cb95414.roa (raw, json)
Hash identifier: DTLh4UrKGU1AXI0UdY6Jar3i4JgpvfdxY9G+RVrnKXI=
Subject key identifier: A1:A8:B2:6D:CB:66:9F:15:78:65:31:EA:E0:9C:12:1D:34:E7:E3:F7
Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial: 010D0C9F4328584CCF208C1389BA30BD6CADA480
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/006f3b36-6e4a-3ec2-aba8-824d7cb95414.roa
Signing time: Mon 09 Feb 2026 19:52:33 +0000
ROA not before: Mon 09 Feb 2026 19:52:33 +0000
ROA not after: Sun 10 May 2026 18:52:33 +0000
asID: 401671
IP address blocks: 2604:c20:50::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cf:20:8c:13:89:ba:30:bd:6c:ad:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
Validity
Not Before: Feb 9 19:52:33 2026 GMT
Not After : May 10 18:52:33 2026 GMT
Subject: CN=e48e7112-19c5-4642-821e-39cd60b9f597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:a1:86:71:dc:a1:5b:0f:4b:8d:79:2e:06:
4d:dc:33:5a:57:a7:c3:e3:66:66:a3:1e:91:17:2c:
30:46:fd:05:3c:76:80:07:1c:86:83:af:c2:a8:88:
47:49:50:48:75:da:3c:2b:19:f7:df:a3:8b:c3:f7:
5b:ab:9b:c8:e2:df:f5:42:cd:ac:e1:4d:3c:eb:71:
c4:27:a0:f8:78:73:d1:d2:92:a3:c9:3e:1f:96:51:
50:f5:d8:a5:0e:49:26:97:5a:2a:92:fd:6c:80:bf:
69:18:00:2e:e6:08:1c:e2:45:db:ad:6c:29:9e:b4:
69:7c:78:4d:af:02:70:a4:82:90:b5:72:1f:42:b4:
70:d7:66:6f:61:35:8a:ea:7f:b9:d9:9d:53:a0:e6:
3f:25:0d:b0:75:07:01:67:9e:c1:17:81:47:10:2f:
58:9b:36:a4:53:26:ba:77:60:d1:45:99:cb:b0:09:
74:89:2c:69:40:ad:fb:45:60:06:a8:32:26:2a:06:
36:60:a9:3e:2e:0a:b9:81:c9:b8:7a:e9:ef:14:69:
24:f6:f2:ad:2f:47:b2:ea:81:93:46:19:a5:9a:37:
e8:9a:58:68:97:84:85:6a:1c:b1:64:e5:20:df:51:
aa:d1:72:47:96:06:8e:fa:d3:d3:ca:c6:c2:58:56:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:B2:6D:CB:66:9F:15:78:65:31:EA:E0:9C:12:1D:34:E7:E3:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/006f3b36-6e4a-3ec2-aba8-824d7cb95414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
X509v3 Authority Key Identifier:
keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c20:50::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:02:36:59:cb:2b:09:b6:35:2b:5b:2e:d6:35:e3:ea:d7:eb:
88:72:77:73:71:56:3f:bb:3b:e0:b5:38:1f:77:6e:52:82:c5:
98:95:48:a5:eb:78:08:ba:3f:f5:21:ce:c7:95:64:a1:a6:12:
e1:f0:40:fc:09:ff:4e:de:fa:d3:d1:c4:b9:ab:d7:82:e7:e4:
1c:c9:8f:c1:af:57:8d:c0:e9:4a:65:ad:1a:43:06:38:8c:31:
de:60:d0:b5:f6:ce:b6:38:0b:14:d4:25:9b:ed:2a:34:f1:3c:
6b:cd:99:53:21:03:1a:50:a7:50:e7:9b:f8:d1:19:5b:0f:55:
30:80:dd:62:3e:77:a9:ff:6a:41:92:6a:b8:a0:92:d5:1f:07:
fe:79:17:e8:e8:37:b0:43:25:a7:6c:f2:f1:9a:79:3e:89:20:
24:c4:da:06:ab:7f:56:b8:b3:14:5d:10:34:25:c5:4a:cf:0c:
3a:b0:b7:25:32:ba:43:51:5d:4c:5f:7e:d9:d7:e7:0f:2e:3f:
9a:04:b4:36:d7:08:d1:4f:e5:5a:1c:b7:f9:a1:1d:b6:36:e0:
8b:9c:0d:e9:f3:bc:a0:09:6c:a2:68:f9:46:41:d7:82:73:27:
4b:ad:8e:d4:f9:29:bf:88:a0:e9:f5:dc:87:53:41:7b:e0:f0:
14:7e:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:14 2026 by rpki-client