
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
File: f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa (raw, json)
Hash identifier: NAug9XJLZw+keRJ5/95DaAiYp1kGAqWwH4Li7Ef7Z3k=
Subject key identifier: C4:0C:84:14:70:8F:2E:07:8D:3D:BA:B9:08:EA:C9:AA:92:79:C2:A7
Certificate issuer: /CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Certificate serial: 010D0C9F4328584D38D501EDB92123F2E785E680
Authority key identifier: BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
Signing time: Mon 16 Feb 2026 14:00:40 +0000
ROA not before: Mon 16 Feb 2026 14:00:40 +0000
ROA not after: Sun 17 May 2026 13:00:40 +0000
asID: 40893
IP address blocks: 2620:ae:a000::/44 maxlen: 44
2620:ae:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:d5:01:ed:b9:21:23:f2:e7:85:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Validity
Not Before: Feb 16 14:00:40 2026 GMT
Not After : May 17 13:00:40 2026 GMT
Subject: CN=b6a978a3-02ab-44c8-9463-48cd1a210b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:ba:0b:1d:91:45:ee:31:c0:85:04:a6:08:
30:6e:d8:3d:76:2f:4a:9f:fc:23:fe:14:b6:f4:34:
3a:a4:22:3b:c3:32:d1:41:1c:69:37:10:95:db:4e:
81:66:0e:39:cf:00:f4:73:c2:80:94:1a:8f:4a:71:
64:82:1e:49:54:88:3a:9a:4f:ef:37:33:03:5d:98:
06:e7:35:8d:8c:fd:84:a2:d3:34:cf:9f:2b:6f:4d:
2f:56:40:1c:f6:45:4b:bd:e9:c3:60:5e:43:90:f9:
60:71:e4:fc:e4:4a:69:a9:55:ff:22:bf:b1:5d:a4:
4f:0c:e7:f2:8b:77:77:e7:fc:cb:ef:8e:1e:99:f1:
f3:0c:6a:80:df:05:49:88:d8:85:a7:3d:41:4b:e8:
e9:e2:af:2f:bc:b0:a1:d8:aa:62:c2:0f:a0:a6:7b:
ac:f6:92:5a:59:d2:cc:80:d5:64:e1:f2:c7:42:8d:
a3:c6:8f:de:a3:c9:30:16:88:85:fd:58:48:20:cd:
99:b7:d1:6f:ab:03:9b:01:07:30:0b:9e:23:57:18:
a7:5c:2f:ca:8c:ca:79:9d:19:39:a2:54:fc:b5:cb:
d9:9b:1e:93:75:98:77:5a:c8:2a:d3:05:bb:4d:a3:
20:1b:a2:42:e2:f5:e6:fc:f5:9f:8c:23:92:ce:b9:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:84:14:70:8F:2E:07:8D:3D:BA:B9:08:EA:C9:AA:92:79:C2:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
X509v3 Authority Key Identifier:
keyid:BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ae:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:7f:31:5a:0e:a8:30:28:4c:98:7d:09:ac:9e:56:c2:c9:5e:
46:51:37:37:6a:60:ac:b5:ff:4c:d9:ac:26:5f:bc:37:58:f4:
82:fa:6f:20:d7:1a:55:18:6b:81:0f:f3:1f:73:13:fe:51:e8:
ea:ff:54:9c:75:c2:a8:4d:e0:18:b6:c2:84:13:f2:b1:5d:05:
f3:cd:34:bc:42:78:23:ea:b4:b6:00:17:83:60:ae:dc:ee:a1:
04:6b:40:d2:6a:36:d1:ad:62:99:17:09:38:42:6a:4c:9c:48:
d2:52:5b:af:f6:ed:67:df:6c:63:f0:7c:42:ba:c1:bc:37:29:
17:05:ef:6f:16:88:b9:2a:bb:f5:3c:70:31:41:4b:bb:d9:b0:
3e:72:80:ba:2e:6b:1b:a3:3c:5a:70:23:94:ab:a1:5e:ee:c9:
d1:33:af:73:06:a3:9e:70:c1:47:74:0c:b4:7b:34:93:20:d5:
84:0f:78:92:89:5d:00:60:47:b8:f1:c3:05:f1:f4:d7:fc:51:
29:eb:68:2a:b0:be:0b:01:c5:cb:27:07:12:d3:24:6f:8d:bc:
56:01:57:71:62:63:ca:3c:36:77:0a:30:b5:53:0c:81:78:ab:
bf:49:ff:58:6e:9e:8e:21:77:62:37:e4:bd:85:ed:dc:19:b1:
eb:4b:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:24 2026 by rpki-client