
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
File: 89f552c4-e871-335b-a52e-1783b13622ce.roa (raw, json)
Hash identifier: CdSJfdhnFixu/0QJ9SjAh9FGSV+Ooo0OdfXfcMT3T/Y=
Subject key identifier: 04:AF:62:F5:7E:9B:89:CE:4F:AF:D4:44:79:67:C5:F5:54:A8:07:41
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF79D47ADE8B34E537A180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2d80:a180::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:79:d4:7a:de:8b:34:e5:37:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=fdcc4c0e-86dc-4e54-afec-cb1a92732378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:54:85:fe:ff:c6:87:61:ae:78:0d:3d:56:
90:bf:00:75:86:18:64:8a:6a:81:88:72:44:ba:0d:
90:a5:9c:1c:7b:6a:0f:be:95:8b:e2:60:50:73:dc:
bd:d4:d0:0a:74:13:1c:c8:d8:71:af:74:79:89:f1:
ef:d2:16:71:05:00:a4:58:a9:45:08:0a:cd:c7:47:
0d:0d:a1:91:4a:90:d6:1f:3b:66:77:bc:5d:df:13:
12:dd:69:26:75:f4:58:fc:ab:37:04:d2:59:a9:98:
2d:ca:7f:e3:fd:34:c3:e4:f5:73:8b:62:a6:60:40:
26:9c:5e:36:75:6e:0b:58:bb:3e:f6:bd:39:5e:27:
dc:aa:ed:bd:96:58:85:6c:b6:09:97:3d:f1:9f:1a:
82:7c:da:39:9e:7a:68:57:e9:d2:b4:03:2c:57:91:
ea:f7:0d:f7:df:71:10:81:2e:ec:b7:2b:a0:01:94:
b6:f0:1c:06:a0:26:89:d0:6f:9e:fb:1a:f9:0a:82:
61:90:a0:9e:7a:93:84:8f:fb:6d:51:74:74:fa:02:
ac:f6:9e:25:93:c5:21:83:f6:12:d2:07:94:75:02:
25:f9:55:f2:b4:a0:25:79:0c:fe:2d:42:8b:17:a0:
cb:05:ef:46:87:c1:8e:b5:d7:24:3a:f4:21:90:7c:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:62:F5:7E:9B:89:CE:4F:AF:D4:44:79:67:C5:F5:54:A8:07:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a180::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:9e:9e:af:bd:b1:8c:50:d9:b3:1a:a4:fc:b4:9c:41:5b:27:
59:22:43:2a:64:6e:44:d9:1c:17:0a:f5:22:a9:2a:77:4d:4d:
43:45:f7:34:bd:26:dc:4f:63:ff:be:fd:1b:e9:88:fd:27:b0:
c1:46:6e:29:39:bc:83:51:4d:4c:11:6a:52:0f:ef:6e:a3:61:
ac:3f:39:f5:af:11:3b:18:20:1d:41:9e:6b:c0:27:4d:5b:15:
70:ca:77:9c:38:83:48:fa:8d:f7:91:ba:a9:47:1e:82:5e:fb:
73:f7:ca:5b:8d:30:1a:fb:db:ae:02:8f:35:ed:58:5a:cc:da:
b7:f5:f2:8d:33:79:09:1b:5d:01:45:e5:a9:73:8b:21:a4:73:
31:22:c2:f3:96:5b:db:c3:1f:42:1a:4d:5f:69:90:48:7f:ca:
45:52:ea:19:97:9b:b6:02:09:55:89:b4:01:51:dc:72:2c:74:
37:28:a8:0a:ae:58:06:c4:ca:98:17:14:ae:cc:a1:a2:1b:91:
f8:9d:44:f1:9a:be:18:46:be:6f:ce:10:e0:ff:a1:06:7d:14:
91:dc:c0:3c:a4:77:27:f5:34:f2:48:df:c2:c2:96:3d:aa:e8:
30:4b:2a:8c:b1:f5:eb:f6:74:12:71:a2:50:99:64:0d:f9:75:
8c:e7:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:34 2026 by rpki-client