
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
File: a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json)
Hash identifier: abRtRnsN2wivb/3iQT1VsvR2R83BF9h75ZVvGTaPTXg=
Subject key identifier: 5A:EF:C9:44:90:03:1F:48:71:E4:7A:7B:6D:D3:F4:4A:58:B3:7E:B9
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F4328584CF6ECD60B1D7B8A585A00FE80
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
Signing time: Tue 24 Feb 2026 02:00:31 +0000
ROA not before: Tue 24 Feb 2026 02:00:31 +0000
ROA not after: Mon 25 May 2026 01:00:31 +0000
asID: 14500
IP address blocks: 2607:72c0:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:ec:d6:0b:1d:7b:8a:58:5a:00:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Feb 24 02:00:31 2026 GMT
Not After : May 25 01:00:31 2026 GMT
Subject: CN=7f0cbdca-e9a1-468e-a5ec-94a4b1dce301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:97:e4:d4:94:62:1b:33:8d:b0:0d:91:c8:
b1:6a:35:68:ac:00:55:fd:ab:56:4d:b6:7c:df:86:
1b:df:b9:82:b0:40:9e:b9:9b:cf:80:75:4d:be:cc:
21:f8:07:0c:1b:81:63:8b:f2:20:56:f1:dd:82:1d:
0a:0d:57:89:57:de:e6:7a:0e:0b:63:04:e7:ab:a2:
64:8d:cd:3b:25:ba:38:d2:22:10:61:7b:e5:e6:43:
3c:0c:7d:eb:12:2a:fa:98:96:19:36:27:be:78:91:
3c:99:cc:bb:57:80:f3:26:ca:97:eb:28:3b:dd:8d:
c3:83:51:1b:7c:e8:a6:a6:85:1f:58:37:89:a0:ad:
ff:98:39:70:f4:76:83:21:a4:77:46:96:97:7b:4d:
00:57:52:06:fe:b1:a6:73:48:87:9a:6b:31:78:03:
65:d8:9e:27:a1:48:bf:61:ac:0b:b0:ac:ac:1d:16:
44:4f:37:65:4a:71:e7:e0:94:98:af:76:c7:a5:90:
57:77:93:db:4b:6a:a2:17:f0:ed:f7:36:b0:21:2d:
98:eb:4a:d2:15:f3:99:ec:da:00:0a:35:cd:bd:e4:
51:17:98:87:d9:35:ed:37:1b:a8:65:da:50:c8:70:
4f:af:70:47:64:97:b6:ec:c0:cf:47:15:a9:fa:42:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:C9:44:90:03:1F:48:71:E4:7A:7B:6D:D3:F4:4A:58:B3:7E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:72c0:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c0:b6:43:7f:73:2f:4c:15:ad:08:4d:f5:aa:6e:df:34:49:
97:61:ed:65:4e:ed:04:9b:6e:a1:7a:95:a0:a5:12:2a:fa:fa:
cb:ad:b7:de:19:ce:6e:ac:6b:05:46:12:0c:72:66:94:bd:14:
51:05:12:48:85:42:b1:45:94:14:18:0f:76:10:87:99:8e:ca:
f6:29:5c:0e:5e:54:8c:33:97:62:aa:65:37:f4:42:ec:bc:2d:
7b:c0:b2:d0:cd:80:31:9c:64:b0:25:ed:a0:8d:60:a0:c4:1a:
c0:03:97:00:74:90:e2:55:17:fc:a8:ff:30:93:2e:cf:83:4d:
ee:00:76:67:32:76:34:fd:98:07:fd:3e:dc:fc:a9:ea:96:3d:
3e:db:bf:d5:39:8a:81:2e:52:86:58:44:eb:10:ff:b6:b6:db:
08:d5:47:80:ee:4a:b6:6b:c2:dc:5a:6f:ef:e1:37:74:91:c8:
65:64:84:37:fc:3c:50:55:6b:b6:5b:c4:bc:95:a0:6d:6a:43:
01:1f:31:67:b5:90:60:c6:b7:a7:a2:0f:4d:0e:d3:63:62:8a:
c1:e2:5b:0c:88:3d:3f:af:25:07:65:77:93:20:74:c9:e9:ef:
c4:9c:05:71:fa:a0:0e:82:23:28:84:48:ef:b1:fc:8f:f6:2c:
8a:3f:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:52 2026 by rpki-client