
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
File: 06fbf2c0-813d-3842-8c17-978a309b106c.roa (raw, json)
Hash identifier: NGm7c/2HfdBDiBQqlEQs0TqqG2PDu0odLqJn7xw09Zw=
Subject key identifier: B0:B4:2B:DD:A0:B2:0D:46:EE:0D:DD:D8:DA:45:81:96:48:42:E1:8C
Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial: 010D0C9F4328584D524348057DCB61D218F72580
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 395363
IP address blocks: 2620:129:6010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:48:05:7d:cb:61:d2:18:f7:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=3ef7d46d-0cb7-4079-9882-9a81de47b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:b0:32:c7:8b:8c:bb:ea:cb:48:33:b9:40:
e1:88:d8:2f:8d:33:86:7f:87:83:e4:27:f4:e5:5a:
14:ff:cf:ba:1d:ee:d8:d5:14:9a:47:fa:ab:46:89:
4a:06:8d:d5:fe:d2:45:ed:24:d8:b6:27:d0:a5:c1:
b7:f7:43:50:e1:a1:d0:06:38:3f:e5:46:c1:f5:56:
a1:fa:bf:05:e1:b4:98:c3:df:1d:e0:e0:27:dc:d0:
11:c6:1d:4d:e4:cc:e9:57:fa:e1:ab:e8:87:cb:28:
24:5b:c0:59:fc:8c:56:02:eb:0d:14:f4:2d:d1:1e:
f6:8a:18:58:0b:4b:e1:e8:c5:cb:69:e2:87:ec:6d:
34:53:ec:d4:cc:ca:fc:23:3f:5b:dd:c0:0d:43:2b:
db:42:8b:ec:4c:73:b9:ec:35:84:1d:08:af:c9:7b:
96:f1:2e:94:2d:48:b1:33:23:09:1d:db:66:e0:59:
51:97:7a:f1:81:a2:40:4f:f8:84:29:27:d5:af:38:
44:6e:52:c3:80:74:27:60:fd:bd:26:05:c6:d6:88:
71:91:e7:8d:cf:87:62:da:0b:59:13:39:29:09:a1:
70:e3:c0:84:5b:33:62:2a:70:6f:71:85:af:55:55:
41:fa:6f:53:fc:f6:58:1a:4b:bb:61:b1:92:d2:86:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:2B:DD:A0:B2:0D:46:EE:0D:DD:D8:DA:45:81:96:48:42:E1:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
X509v3 Authority Key Identifier:
keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:129:6010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:74:71:f5:08:ac:34:97:e8:fc:c1:26:bc:bd:8d:6b:fa:01:
7d:3b:e3:8f:62:41:0c:3f:14:c2:3a:01:9b:65:eb:73:af:32:
b5:66:9a:bd:b9:71:cb:5f:09:7a:23:b7:72:3a:f8:ac:ea:21:
37:bb:95:ed:ed:7b:ef:0d:9c:0d:57:28:1d:da:d0:63:e9:00:
08:a2:44:ff:2a:b7:b7:72:bb:d3:e1:02:8e:02:8f:55:cc:9d:
1e:60:ac:99:1b:e5:40:0f:48:46:c9:44:10:a6:dd:5e:f9:14:
7a:20:fb:f0:85:b0:3b:3c:f3:f6:2b:fd:6d:58:90:2f:38:6d:
3f:80:f1:68:36:d0:04:eb:85:d0:75:27:7e:1a:e4:22:2b:20:
dd:ee:7c:56:61:3a:5f:0b:66:09:dc:a7:75:01:9c:d2:5d:56:
18:e9:76:c3:9a:a0:38:03:c6:fb:3a:b8:6c:b8:a0:01:46:89:
59:6c:7d:86:89:d0:92:26:25:69:72:58:a5:b9:b6:20:7f:19:
e1:61:7a:93:80:5a:be:79:d7:cd:13:3f:90:b6:ef:d0:0a:c3:
b6:8a:59:0f:f1:23:97:47:bc:90:17:ce:17:06:1f:fb:4d:b5:
9b:4a:bc:21:8a:fa:bd:a3:bf:90:ac:b0:85:20:aa:17:47:d9:
58:32:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:25 2026 by rpki-client