
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8aa53ebf-b59b-3d5a-9aa8-f14cb9d98bc1.roa
File: 8aa53ebf-b59b-3d5a-9aa8-f14cb9d98bc1.roa (raw, json)
Hash identifier: Cq+VXH4g6vEZtR115rG2SJ5w+7kFDixjifrpxubOcxU=
Subject key identifier: 07:36:5F:A1:22:48:2A:A7:03:C4:43:1A:5B:97:47:5A:40:13:95:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D037D3D96FCD31DB11986AB60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8aa53ebf-b59b-3d5a-9aa8-f14cb9d98bc1.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 6167
IP address blocks: 2600:100a:a000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:3d:96:fc:d3:1d:b1:19:86:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=b23478f2-e37f-439e-b9f2-6134bac40e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:a5:65:bb:5f:45:ac:82:08:87:6f:80:01:
42:0d:02:ce:1d:c4:70:db:79:09:94:89:ef:a1:a0:
da:3f:2c:a7:c7:a1:dd:4c:97:3a:47:a2:5c:96:ea:
d8:64:b8:94:04:f7:21:4a:ce:a8:8d:fb:0b:54:b7:
64:2c:bd:71:4a:97:01:5b:b5:47:55:e4:08:c5:87:
65:df:5c:68:09:02:c4:0e:6b:34:dc:de:2f:fb:a3:
1c:80:6f:af:2f:c4:fe:f3:d1:7d:2a:59:07:86:01:
44:72:5b:0c:16:1e:77:a2:1a:95:58:d9:cc:87:72:
41:42:ef:48:f0:02:b4:3f:2b:91:53:37:d1:fa:84:
7f:a9:5c:95:be:35:d8:3a:7e:73:fc:f8:1c:67:0c:
de:2d:9d:6a:65:72:bf:ab:30:f4:e9:a7:20:82:2a:
88:36:62:4b:36:36:9b:be:24:26:82:83:f7:77:4a:
89:36:af:e1:f6:6c:71:ee:e7:4a:53:84:29:cd:d2:
38:e4:fd:e2:a9:1d:ae:71:e7:c4:48:df:b7:61:34:
ba:bd:fc:5d:c6:c6:f7:5c:c5:6d:25:eb:e8:b0:a9:
27:47:25:68:1f:9a:56:d1:c0:f4:23:fe:3c:93:8e:
f4:be:78:30:37:f1:60:02:59:a3:79:4f:a3:18:2f:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:5F:A1:22:48:2A:A7:03:C4:43:1A:5B:97:47:5A:40:13:95:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8aa53ebf-b59b-3d5a-9aa8-f14cb9d98bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100a:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:81:56:51:25:02:9c:57:56:da:19:58:15:4b:ee:15:38:a2:
fa:1b:38:12:dc:85:88:6d:94:2a:68:c4:90:2d:92:0b:4f:5d:
d0:01:7a:84:35:3f:79:f3:d0:7e:6c:b2:79:32:84:26:db:4a:
27:61:f5:3f:57:61:89:4a:90:38:79:04:06:d5:24:32:f7:a5:
03:2f:57:68:bb:2d:34:3d:c4:fc:35:a0:a0:22:72:d2:32:0d:
91:79:91:e2:0f:46:4b:b7:66:92:77:62:c1:07:72:d5:dd:45:
9f:af:7f:5e:b4:0d:7d:38:c6:9a:34:31:34:b9:2d:45:27:1e:
8c:5d:b5:79:62:97:87:9d:6d:43:f1:ab:96:70:20:97:c2:9a:
77:e6:e6:d6:5b:d1:a5:61:72:7c:2e:e4:9d:74:4d:76:b6:45:
eb:77:20:06:2e:e0:31:26:49:01:e2:92:bd:c7:0b:38:83:50:
27:a0:28:35:10:11:cd:eb:86:3d:98:a5:3e:b2:37:b0:58:d3:
31:b3:90:09:8e:46:03:e9:6c:40:98:ce:55:95:66:a8:d4:1d:
28:f0:b6:48:4a:b5:0d:13:58:92:3a:cb:7e:65:48:14:4f:86:
bc:39:51:7e:7a:cd:6b:d4:41:d1:82:c9:c1:5e:56:b2:a9:92:
c1:1d:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:36 2026 by rpki-client