
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
File: ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json)
Hash identifier: mD3vRoxBxUUcdbNepGYq3sgCfJBHeYLtrYqSh7Y66JY=
Subject key identifier: 63:96:B0:B3:5E:55:81:14:15:39:69:0B:5B:F8:01:E1:2A:11:9C:A0
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584CD13CAA512204FCC252B6DBE0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 16509
IP address blocks: 2620:116:800d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:aa:51:22:04:fc:c2:52:b6:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=58477770-ce28-4066-ab71-930063a600ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:c3:a8:f0:69:41:63:96:cf:06:4f:b7:92:
c9:8c:ea:99:09:a0:d6:f0:c7:20:87:55:13:72:52:
e1:eb:18:f2:a4:26:0a:ec:0b:d4:85:e3:e1:c7:ba:
21:60:b9:25:29:0a:19:99:50:44:dd:3a:40:c8:0a:
98:55:6c:85:a1:74:14:b7:89:52:80:a6:77:56:5e:
b3:4b:d6:f5:07:aa:e2:c2:b0:3f:4d:69:26:70:84:
02:a0:3a:e2:68:e5:17:4e:a5:d2:a8:36:54:b2:f1:
50:ee:c0:f1:77:61:aa:c4:bf:58:89:b2:ea:47:7e:
3c:b0:c8:04:34:8d:b2:98:e9:ef:eb:54:f4:ed:43:
01:86:4e:a3:bf:cb:38:08:93:50:e8:e7:78:2a:32:
11:8e:bb:56:18:de:d4:03:b5:b0:ba:b7:16:e3:9c:
9b:01:b0:d3:17:ab:8a:0a:35:7c:42:d2:a1:d5:41:
be:02:74:44:c3:c3:c6:b2:15:71:8e:0b:6f:84:99:
cc:51:15:e9:f1:59:6c:68:ca:7d:9f:3c:cf:d9:e2:
c0:e3:c3:df:da:4b:5a:97:e6:6a:3b:94:32:b3:6a:
50:e1:52:41:20:61:dc:7b:66:23:87:28:0f:0b:8e:
61:4a:11:40:b0:9f:c4:03:8f:e5:63:24:e5:5f:40:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:B0:B3:5E:55:81:14:15:39:69:0B:5B:F8:01:E1:2A:11:9C:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:800d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:27:55:e3:57:94:2e:f7:2e:5f:e9:fb:4a:2b:66:26:17:30:
a8:11:af:41:d4:e2:20:5b:75:aa:66:eb:00:14:c3:57:fb:89:
34:12:a0:0e:d9:88:10:57:86:c8:41:57:5d:f0:62:b8:2e:7d:
7a:33:20:66:bc:bf:d7:4a:ba:98:cb:a9:c2:ef:1a:96:5d:f0:
a3:7d:25:db:ce:74:35:9f:88:43:a8:e6:ec:bd:95:3e:49:e6:
1a:57:70:5e:3c:63:3d:2e:a6:57:1b:c2:f2:f7:21:a5:d8:af:
98:21:cf:76:35:06:52:b1:f0:2e:ab:f3:3d:9a:66:d1:32:b9:
cb:61:e3:40:ac:30:d4:2f:6f:6b:cc:b2:4f:81:d8:2e:25:04:
8b:42:26:34:bc:a1:68:94:47:36:d4:64:35:0a:b6:60:47:fb:
b0:cb:00:31:c3:73:6a:dd:cf:93:2e:b4:2d:d5:7c:f1:e6:19:
28:a4:96:58:73:ce:61:6f:2f:a7:67:7d:b5:33:c8:90:2e:cb:
e7:1b:60:14:29:b9:ea:79:45:e3:16:f8:84:3f:ef:02:aa:91:
35:dc:e5:b2:9a:1c:10:ac:e5:90:cc:73:ba:3c:ed:d3:bf:c6:
dc:6b:4d:a7:1a:71:99:26:2b:51:60:95:d2:8b:e8:2e:58:c5:
20:b6:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:40 2026 by rpki-client