
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json)
Hash identifier: G4kmiLrnf0iQFn+IzA4pyjvc+4pRbNuBHt7dh7e2AIA=
Subject key identifier: 77:04:EA:14:C6:66:16:FC:15:0E:CD:99:80:C2:0B:4A:D4:F9:69:81
Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
Certificate serial: 010D0C9F4328584D4D5A5F904B3A714DB2016D00
Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 6491
IP address blocks: 2620:67:a000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:5f:90:4b:3a:71:4d:b2:01:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=ef913d3a-b160-474d-81bf-8290b3de720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:20:99:83:2d:05:c3:67:8d:8e:4a:e8:fa:
a3:4f:4e:35:1f:99:d6:5a:b1:9c:3a:73:15:db:22:
42:55:98:f3:e2:8a:70:c3:fa:31:ca:62:ba:ab:e4:
a3:d1:40:d2:22:fb:89:b1:b9:8d:5a:54:17:b4:de:
2c:3c:49:52:ec:cf:e0:dd:b3:66:24:09:7c:c7:f7:
b2:77:fa:2b:73:e8:0d:5b:4a:8d:77:66:13:20:fb:
c8:ed:9d:64:ff:8b:7f:ed:f9:b0:8d:5a:92:a1:52:
7d:ed:51:dc:f4:bf:5b:a5:a4:e5:69:33:17:a0:39:
f5:2f:2d:f6:7b:e9:be:36:ab:a5:56:d9:04:be:3e:
0e:15:e7:be:a1:07:71:40:90:97:01:2e:b6:a2:11:
96:2e:f2:7b:b7:7a:b0:55:4f:8f:70:1c:09:ba:7f:
f3:f4:f5:f8:c9:9e:ff:34:64:d5:eb:ac:42:2b:9e:
1a:77:d2:f5:d1:27:b7:fd:72:76:cf:dc:e3:76:72:
6c:95:16:8f:d0:3e:3c:60:39:28:9d:bd:53:02:18:
1f:2f:5d:0b:96:51:4e:b3:68:c9:05:f7:55:d4:94:
19:eb:47:b0:0c:14:bc:3c:e7:5e:62:d9:d7:a5:73:
70:93:18:51:cc:19:b3:cb:2d:f6:b7:63:fe:dd:4a:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:EA:14:C6:66:16:FC:15:0E:CD:99:80:C2:0B:4A:D4:F9:69:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl
X509v3 Authority Key Identifier:
keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:67:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:13:2c:25:39:55:32:fc:6d:e9:80:35:4a:7d:4e:e7:c2:e9:
50:e2:e7:be:79:bc:80:30:32:1c:4b:97:fa:14:7f:34:97:ad:
b4:b4:be:50:7f:c2:a4:11:af:81:71:bf:f7:0f:92:9d:be:8d:
7d:bc:24:87:2e:a2:be:1b:7d:02:5a:bc:79:78:2b:9e:e1:8a:
07:79:85:d0:b5:20:d3:d8:d6:9e:ba:7f:ff:44:1a:b8:de:4a:
24:8e:47:70:20:34:03:08:55:18:ca:d2:d7:8e:ca:24:85:f2:
c5:8e:c2:de:5b:26:89:ce:c3:77:d4:28:a8:05:d8:ae:1f:4c:
f3:ce:8d:66:4b:4d:bf:3d:b8:cc:54:9e:ca:13:2d:eb:e5:d7:
6d:cf:48:de:1e:bf:35:82:18:3c:d9:74:d6:b3:9b:51:3a:e1:
9d:3d:8d:31:d5:81:8a:ad:f2:a0:2b:e5:12:56:fb:f1:bd:6d:
3e:b4:70:7a:6b:20:23:ec:08:e5:69:9d:83:a5:de:f5:1d:57:
ba:89:bd:94:ed:25:42:1b:bb:3b:dc:a3:3d:ed:af:e1:e2:5d:
0a:bb:6b:e2:3c:f5:ff:c8:df:ac:ea:36:bd:63:b3:dd:30:91:
c2:76:f2:14:26:9a:a1:cc:84:8b:e4:4f:f1:cf:9a:be:49:76:
8d:0b:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:18 2026 by rpki-client