
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa
File: 00133959-4973-306d-8211-4b24b1604443.roa (raw, json)
Hash identifier: oKHM80LuoS2EryES+bphLsUI6WktrNfcZLdLhmQhvkU=
Subject key identifier: 04:3C:C3:E9:98:BA:15:EE:F3:3E:E1:48:5A:19:AB:00:4E:21:FB:93
Certificate issuer: /CN=ad865195-b338-4cba-80f6-5de4a1b2633e
Certificate serial: 010D0C9F4328584D712680E3DD01779C6BD5CC80
Authority key identifier: B9:CE:EE:12:78:62:A4:25:BC:53:77:82:25:FC:B3:49:80:77:A0:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa
Signing time: Wed 08 Apr 2026 20:45:30 +0000
ROA not before: Wed 08 Apr 2026 20:45:30 +0000
ROA not after: Tue 07 Jul 2026 20:45:30 +0000
asID: 402155
IP address blocks: 2604:de80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:26:80:e3:dd:01:77:9c:6b:d5:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad865195-b338-4cba-80f6-5de4a1b2633e
Validity
Not Before: Apr 8 20:45:30 2026 GMT
Not After : Jul 7 20:45:30 2026 GMT
Subject: CN=b085d7a8-a030-483c-9399-a154705e3484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:6c:8e:d0:0b:17:3a:11:d8:7c:9d:57:5f:
e5:85:70:70:cd:0d:8f:19:8f:1d:5b:0b:10:d4:d6:
65:97:7a:a5:6e:d9:a1:36:ee:51:21:b3:05:09:fa:
9c:24:20:e1:70:61:9d:fc:90:78:b0:04:df:94:09:
38:7b:7e:bc:6d:b7:5a:46:77:03:8f:47:47:89:db:
ad:84:55:ce:8c:68:5e:a0:6f:f8:55:df:93:99:5f:
13:6a:73:f4:eb:31:24:b5:af:52:3f:46:36:58:42:
a3:fc:4d:ba:8f:13:b5:53:12:04:ae:30:59:3b:00:
e8:45:e5:40:5d:4d:de:c4:d9:e0:4c:75:28:8a:05:
26:32:6a:6a:9a:8f:f6:91:03:ce:2d:31:3f:04:13:
20:3f:db:ae:db:99:93:98:cd:43:09:a8:eb:e6:51:
df:11:e5:74:e6:40:61:c5:27:03:a4:4e:d1:97:7d:
70:e2:fe:58:39:62:8d:98:33:9b:b5:9d:08:08:14:
e3:7c:f2:b8:6b:41:8b:5e:e1:19:d2:f5:fa:6c:38:
46:d6:03:e1:9e:24:b4:53:ad:22:e1:d1:c0:18:10:
c8:f2:ec:eb:e9:9e:05:1d:45:5e:5e:28:e3:f5:29:
36:76:80:05:73:86:2a:5f:e9:37:a9:9b:52:0b:b1:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:C3:E9:98:BA:15:EE:F3:3E:E1:48:5A:19:AB:00:4E:21:FB:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.crl
X509v3 Authority Key Identifier:
keyid:B9:CE:EE:12:78:62:A4:25:BC:53:77:82:25:FC:B3:49:80:77:A0:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:de80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b3:5f:04:53:57:80:47:4b:c7:e2:a2:03:a0:11:f6:48:28:
52:eb:f1:f4:6a:de:0d:0c:f4:0f:3c:ae:ef:87:4f:4f:63:10:
16:18:44:ca:cb:a3:b6:39:04:f1:f6:f6:14:e7:93:6c:ea:8f:
64:bf:02:da:b5:db:03:a2:21:73:e7:bb:0b:dd:44:60:64:d0:
5b:c6:59:06:bc:1d:8f:12:7f:30:28:b0:d7:59:6b:18:aa:fb:
ca:c3:df:b3:75:56:23:5d:81:fc:7a:8d:8c:24:fa:9d:1f:c9:
74:00:c8:bc:a9:e7:b8:a0:7a:17:fd:ef:3d:61:b4:13:77:57:
b9:84:dd:b1:88:aa:36:e0:da:d5:d6:e7:15:33:79:55:2d:ed:
46:22:8f:01:03:ff:36:de:93:ed:a6:07:30:ce:83:77:57:71:
69:31:e9:57:0e:2e:f2:4f:cf:d7:75:6e:54:fe:a8:f8:d5:23:
5e:97:b1:4f:97:18:55:8d:a1:de:2f:15:50:d0:4b:7b:35:78:
85:8a:85:fe:f4:d7:b6:ba:95:97:e6:7a:e8:1d:21:28:71:8b:
98:ee:7a:50:56:e8:b2:f1:92:45:06:9e:28:64:5d:f7:42:67:
71:08:6e:a0:33:f4:80:19:a8:9e:fd:07:fd:e3:e4:67:d6:c9:
76:e8:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:17 2026 by rpki-client