
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
File: be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa (raw, json)
Hash identifier: 89nE9XR34ZWSfGgW1+ACrOQmRUFWC6Qd5qS6u4NEETc=
Subject key identifier: 25:47:3B:06:98:92:8B:43:5B:FF:71:6E:68:62:6B:93:AE:96:BF:8F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D037D2BF9C8991998480E8440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 6167
IP address blocks: 2600:100e:be12::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:2b:f9:c8:99:19:98:48:0e:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=8b0a038f-1601-4c2a-a9be-13fa9b8521d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:5e:e6:68:c6:94:cb:b2:00:09:ae:db:e6:
3b:25:9b:48:aa:ec:23:df:a9:a7:d4:fd:9e:53:ba:
72:43:aa:90:fc:84:ed:7a:f7:4c:0a:4e:80:ee:dc:
93:57:84:74:45:88:91:c9:10:a2:f5:c2:ac:79:01:
ed:d8:da:a5:f2:f4:83:e8:1f:15:ac:99:1b:9f:c7:
90:c0:47:8b:a0:1d:af:86:00:57:ad:2b:24:b2:a1:
36:30:05:56:a2:4b:f4:13:90:23:df:a0:11:53:b0:
6a:39:25:94:d1:6d:15:f9:8c:83:5e:51:f1:a4:e6:
68:2b:8d:f1:20:43:f8:1e:2b:e4:4f:7f:cf:20:40:
20:55:8a:39:2a:82:0f:2b:8a:11:58:3a:83:2b:81:
55:1c:b5:87:92:68:8f:63:de:99:1f:2a:b7:ff:23:
77:d3:f9:40:5c:63:a3:b1:bb:8b:f1:1b:aa:ce:cc:
80:70:2c:9f:3c:98:73:cd:2c:21:28:a9:a6:ef:00:
96:00:da:e5:c9:09:79:b0:b4:cd:54:71:d1:8c:13:
d3:b1:4d:96:29:00:ab:99:a9:ec:f4:0e:6d:92:9a:
a8:bc:32:3b:0d:a5:55:fe:7e:3a:51:a0:e3:6e:37:
f1:80:d4:f7:82:c5:32:69:43:f1:c5:fe:f8:c8:fb:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:3B:06:98:92:8B:43:5B:FF:71:6E:68:62:6B:93:AE:96:BF:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100e:be12::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:8c:26:4e:e0:8c:27:19:1c:e3:fb:79:a1:db:36:cc:80:1f:
5a:1e:6c:7f:34:18:26:fd:1f:ac:61:15:f1:09:d0:10:a1:4f:
ff:13:83:71:32:f9:e0:76:1d:1a:f7:6c:f5:f6:1f:1f:59:0e:
ab:e7:33:d2:41:77:16:f9:b2:85:6a:93:c5:1f:98:05:e2:7a:
f1:86:46:3f:20:4d:82:21:84:26:17:e3:3c:c2:7d:be:80:d4:
14:51:03:3d:06:c6:5f:2c:5c:f3:8b:ed:bc:b6:15:be:45:76:
7e:17:11:f7:d3:a2:42:e2:20:d8:fd:14:8a:4f:84:a8:cb:00:
cd:38:2b:9e:26:f1:b6:20:37:23:77:39:85:73:33:0b:a0:c5:
29:b8:63:dd:ed:a0:98:c6:86:39:06:e6:32:7a:28:6d:7c:6c:
88:40:b3:57:8c:3d:64:8a:78:18:27:94:52:3d:c3:00:f6:0b:
27:3a:63:53:40:88:b4:5c:3d:23:db:4a:da:22:a6:5f:84:e7:
d4:e5:87:16:0d:83:11:49:ad:9b:ed:5c:f6:9f:81:10:db:7f:
32:f5:11:e0:93:14:04:0e:2f:f7:c0:d8:3c:b2:93:20:b1:f6:
05:af:f7:30:13:03:03:70:85:c7:c4:1d:35:d5:11:3c:b9:9c:
4d:f0:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:53:58 2026 by rpki-client