
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
File: d75649a1-b301-3715-8538-a3a7b4010c93.roa (raw, json)
Hash identifier: 6yWSXtkNolSsiKbLR8tRXn1sOHNpWOM5EBkIEiZkoEM=
Subject key identifier: 68:C4:D3:02:6B:7B:24:D0:8C:83:09:51:08:B9:4C:0A:34:3D:B9:3A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF7FCF59363EC513934EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2d80:ac00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:7f:cf:59:36:3e:c5:13:93:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ebfc0d14-a1e3-4cb8-9a17-d701bf0edd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:d9:18:ad:2d:de:2a:35:eb:d2:20:6f:b8:
a1:47:a0:7c:d9:3b:d6:90:7f:ab:5a:1b:27:ef:f0:
f5:99:45:28:98:f3:51:37:47:aa:43:8d:19:2d:11:
92:22:a3:fc:91:78:08:33:37:49:e1:02:63:01:bb:
9e:97:2a:76:9c:e0:32:11:9c:05:56:32:5b:d1:9d:
f9:33:26:99:14:5b:81:c1:69:b6:df:73:ff:ec:a6:
89:5b:01:99:0b:fb:6d:49:a1:77:00:e1:bc:5d:a6:
56:a9:6c:f7:11:7e:9e:93:c6:42:b0:b1:a1:2c:0c:
c5:22:9c:87:75:53:9e:70:9d:2c:08:d9:32:da:f6:
5e:01:35:36:dc:e6:67:5c:8d:0b:6b:ef:20:a9:26:
c8:30:0b:41:82:2a:db:a4:8b:c2:33:02:3d:5f:08:
35:ea:23:b9:4a:6f:78:af:0f:94:b8:64:04:6c:6c:
91:03:9c:0e:37:45:3d:75:5b:83:c4:0d:24:20:c1:
e0:b9:d1:32:fa:50:50:86:fe:74:00:e0:9f:4f:51:
7c:f9:e8:ba:f9:fe:9b:fc:cd:85:e1:83:7c:1b:1a:
59:ec:4a:d1:6c:3a:a1:b2:40:bc:84:e0:f8:11:53:
9e:d2:66:52:29:22:f5:1f:e8:cb:ea:02:30:c7:4e:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:D3:02:6B:7B:24:D0:8C:83:09:51:08:B9:4C:0A:34:3D:B9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:ac00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:94:a6:b7:fb:3f:14:59:97:da:ee:c3:3a:05:da:db:45:0e:
6d:2f:fa:c6:5d:2d:00:3b:d6:c4:51:12:fa:0e:05:83:b0:3a:
54:75:7c:3f:11:32:6f:81:48:fc:6c:58:55:53:32:5c:55:46:
52:7c:a7:70:30:1e:b8:27:cd:88:ef:41:ee:b5:d1:f3:fc:e4:
c5:74:8d:3d:7c:ba:ba:27:dc:64:23:67:57:fa:fa:07:22:c4:
0d:3b:bf:64:98:e0:77:8e:fa:6a:5a:ac:a0:30:c4:14:a0:1d:
bc:10:ba:60:01:1e:65:25:90:79:97:17:80:4a:93:a4:02:cc:
c2:8a:9a:ec:f0:bc:62:54:6f:dc:bf:23:71:c6:c5:8b:29:bd:
ac:62:4f:0c:3f:59:8c:f8:3f:37:6e:4e:af:84:8c:dd:8e:ad:
0b:de:26:37:ff:40:7a:e1:90:4c:42:8f:08:91:92:6d:c8:3c:
92:3c:bd:f7:d8:b1:11:52:12:12:14:44:59:d6:6b:e0:c3:61:
f9:dc:9d:22:b0:33:5f:b6:15:f4:38:7d:08:e7:e1:a0:9c:dc:
28:83:c8:a0:1b:78:e4:30:8f:a6:df:64:63:62:0f:e2:b9:af:
ad:29:de:81:a4:a2:53:ce:6a:73:d1:54:08:73:5e:81:f0:a9:
77:a2:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:35 2026 by rpki-client