
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
File: 2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json)
Hash identifier: 0KGvth4Rc+k3gHnQCRtCQb7L9SiSzjxHYDbazzdhjDQ=
Subject key identifier: A3:92:35:77:C0:D8:DD:24:E6:E6:35:09:94:13:C1:FF:EE:CA:D5:30
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584D55BA4B3396B4E7FCA4A0E590
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 27281
IP address blocks: 2620:116:8083::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:4b:33:96:b4:e7:fc:a4:a0:e5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e4f96e87-bcee-47b1-92ef-8fae097842db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:86:b0:a4:75:f3:92:a8:31:30:d6:c9:e7:
92:3a:94:cc:66:4e:b1:8e:62:c3:4c:78:c0:c0:43:
05:fa:6a:9e:e8:86:02:0c:dd:22:41:03:6e:30:46:
11:28:4f:48:d8:ef:92:92:c7:c3:0f:bd:03:e4:34:
36:72:82:f1:0c:49:5e:76:bd:a2:22:4b:0e:f5:94:
3b:53:72:e7:72:28:06:56:6e:18:99:4b:95:4e:00:
40:98:a5:04:1f:7d:f4:f1:93:5d:a1:00:5d:8d:8f:
74:b6:46:fe:cb:d8:0f:ed:21:92:90:9c:9e:0f:3d:
e4:d8:5f:20:5b:81:81:c1:02:ba:12:7d:4f:9d:0a:
1b:e5:d8:91:38:86:94:64:61:68:17:8f:f5:ac:11:
d0:23:14:02:5f:aa:f0:99:72:ca:cb:bf:28:d9:6d:
90:4d:97:6e:a9:4b:7c:9b:07:05:5b:d6:07:2b:b8:
3e:e2:3f:42:d9:e5:34:a8:ac:2d:71:51:d6:7a:18:
06:89:6e:f6:c9:a4:fd:af:58:28:ba:04:ca:88:34:
90:95:f0:3e:f2:a3:dc:97:29:b6:68:c8:25:fc:ca:
bf:9a:25:b6:ac:85:80:e0:d4:68:87:ac:f8:9c:30:
bf:df:16:ed:d0:73:92:41:9d:c5:08:e1:8f:17:c2:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:35:77:C0:D8:DD:24:E6:E6:35:09:94:13:C1:FF:EE:CA:D5:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:8083::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:13:10:a8:ff:cb:de:94:16:be:57:dc:b1:fd:96:80:86:0d:
7e:7e:90:fd:c9:7e:97:5e:e0:62:d7:ad:2a:fc:c5:83:d6:7c:
f3:02:8e:97:2f:e5:4e:31:6c:91:12:d7:5d:6e:85:af:4a:63:
e7:f3:7c:3f:75:c8:59:fb:47:df:90:66:e5:7d:4e:90:c3:c4:
9a:e3:44:a6:70:e2:1e:a5:c5:62:33:2e:85:1a:54:62:e6:6c:
29:45:e7:a2:9d:e6:6a:90:10:33:70:d7:a6:b0:6b:56:fd:7e:
6c:41:5a:84:79:15:ad:9d:3a:81:3b:15:fb:0e:be:ce:aa:28:
87:5d:19:0c:95:5b:a4:be:5e:c3:83:56:7e:4e:7c:e8:0e:2f:
dc:ac:58:50:f5:f3:ac:27:67:ac:fd:e5:46:c3:17:26:94:a5:
cf:96:40:e8:ec:14:65:a7:5f:d7:ac:2f:48:d1:fc:09:e0:20:
d8:d3:1f:69:27:23:ef:ca:5b:a9:42:d9:40:73:3e:a9:06:bb:
69:67:af:8b:51:e2:15:8b:70:19:84:e5:84:15:be:a2:22:c3:
59:a5:4b:7b:59:9c:9f:24:6d:3a:27:13:02:b2:55:bf:cc:f8:
d1:31:d6:eb:03:f2:fd:af:15:39:c2:fc:8d:09:79:1d:fe:bc:
5c:ab:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:34 2026 by rpki-client