
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa
File: 58bd39cc-2d7d-31ec-92cd-db743957baae.roa (raw, json)
Hash identifier: /MJxZNkgfyQumnQqAy2sK1WE/fxzPNmWUjloamIiMg8=
Subject key identifier: 43:A4:E9:34:EE:80:CB:72:E5:B1:58:93:47:8F:B8:1F:DE:75:43:0F
Certificate issuer: /CN=3f21d6d0-2d09-4711-b420-9646c9d81c01
Certificate serial: 010D0C9F4328584EA7874B09BAA9AB56BDBBEA00
Authority key identifier: C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16871
IP address blocks: 2602:f451::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:4b:09:ba:a9:ab:56:bd:bb:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f21d6d0-2d09-4711-b420-9646c9d81c01
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=599f19cb-73bf-4a52-9c46-4694907a4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:15:8f:87:9b:36:c2:c2:f7:b1:12:51:1f:
07:05:76:0a:36:34:86:25:0a:34:b5:97:47:a8:36:
9c:ca:14:64:a5:ed:d0:fa:8b:1b:9b:98:d8:d3:29:
58:9d:81:b9:55:86:37:0b:b7:93:f4:cd:4a:b2:35:
19:90:68:f9:df:f0:ce:63:7c:5e:9d:6b:be:7e:71:
0a:ee:58:da:4d:7b:c4:f2:29:11:aa:f9:3f:3a:06:
4f:e3:52:5b:e9:8d:0e:5d:fe:49:15:56:ca:b2:da:
ee:6f:56:b4:8a:1c:b8:29:a4:15:94:98:d6:3c:2a:
50:ee:ad:d9:b1:8a:65:1b:73:10:8b:1e:a8:58:6d:
70:8c:27:d1:60:12:1e:3b:39:46:4f:c4:03:b7:ef:
7b:c5:32:5d:56:72:a7:03:8a:7b:3e:a6:a8:41:82:
59:ef:8e:a6:40:08:e3:6c:e6:4e:cf:63:af:70:dc:
cb:76:f5:f2:b4:6f:9b:d9:44:84:08:37:2d:12:83:
81:3d:7e:3c:ec:61:89:cc:e1:32:b4:ff:52:67:48:
41:b6:da:38:07:9f:be:a1:7b:33:5e:98:a0:a6:6b:
46:ea:1a:76:b0:40:73:1c:85:ee:45:21:96:be:43:
52:4d:9b:1d:c0:3c:63:80:d4:5c:e1:d9:08:36:b2:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:E9:34:EE:80:CB:72:E5:B1:58:93:47:8F:B8:1F:DE:75:43:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl
X509v3 Authority Key Identifier:
keyid:C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f451::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:16:ef:aa:25:24:1f:79:f5:ff:10:eb:6e:9f:c9:28:68:1b:
e5:c7:a0:25:b1:28:fd:8e:45:cc:60:22:79:86:a9:da:5c:45:
f6:a7:67:2b:5c:4e:f7:4a:17:61:0b:31:12:d5:71:48:e1:99:
71:83:e8:e3:03:16:0d:5d:49:25:ba:e1:d0:db:b9:e1:e6:ec:
1c:1b:06:1f:33:c3:8f:7a:bb:e0:e7:37:ba:31:59:a5:89:27:
a6:0d:ea:37:4b:45:23:95:5b:75:a2:62:a1:aa:fb:93:27:b3:
9f:9a:92:32:46:23:17:27:c0:4c:a5:8d:d4:d7:68:a9:fd:2e:
4f:b2:fa:19:34:91:13:a6:3a:59:4b:79:c8:12:9c:7d:78:ba:
2b:f1:09:8a:3a:20:93:1f:fe:c6:1a:56:58:84:1a:39:7b:67:
7c:b4:c1:5a:b2:fe:89:88:2c:81:d9:4a:16:03:bb:4f:ce:3f:
1c:c1:4c:40:31:67:de:a8:8f:ab:60:b3:1f:12:ff:71:8e:56:
44:2f:67:0d:a8:3c:dd:64:59:09:07:27:24:24:7e:16:b8:e3:
01:73:0d:d8:4b:c1:8a:fe:24:64:f9:cd:fc:af:6d:d3:71:09:
09:2f:e1:a7:c8:3b:da:8a:11:c9:0d:49:07:d0:60:f9:0b:8c:
99:3a:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:55 2026 by rpki-client