
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa
File: cb11550e-799e-3edd-b45e-f62709cebf21.roa (raw, json)
Hash identifier: mvMyAxN9puQexYXcx2g3+1nZTRoE+qyitdwjepuRZ5I=
Subject key identifier: 1E:C4:B4:4F:00:24:F9:7D:AE:46:EA:D5:9A:EA:19:7D:5A:91:4D:04
Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial: 010D0C9F4328584D4A8F9119B6BC5550AD447200
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 4181
IP address blocks: 2610:1f0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:91:19:b6:bc:55:50:ad:44:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=f5d5181c-eaee-44bd-80cd-9b2320ed2da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:4b:d8:88:65:ad:6a:50:41:af:68:e0:dc:
e2:96:76:66:2a:dd:b9:19:f9:06:71:d5:ca:b4:f6:
f2:ae:47:19:2b:6d:d1:88:fc:a1:cf:47:e9:f2:aa:
02:ab:10:79:dd:92:33:68:c5:bf:f9:83:e1:e5:ce:
c8:03:b6:4c:3f:b9:0a:3a:c5:4f:73:a8:78:6e:37:
d1:62:95:e6:d5:b2:ef:9e:f5:a6:c6:c8:00:3d:ab:
5c:6f:2d:75:a4:dd:49:f6:44:1a:d3:34:9f:28:0f:
e2:fc:e6:11:d4:5d:15:56:84:1a:0d:87:e0:df:e2:
e1:01:38:fc:a1:00:e8:18:70:0f:12:ce:5c:98:95:
33:b1:d3:39:6d:9f:28:dc:28:72:93:ab:ea:bd:01:
99:07:69:82:24:3a:d9:7d:2a:5a:88:e4:d3:bf:c2:
44:e0:23:29:33:61:73:c9:9a:b6:4a:85:2d:4c:8f:
e0:be:c7:31:1f:e7:7c:51:75:0e:51:3f:67:c7:92:
2c:48:60:42:55:da:21:13:34:62:59:1a:62:20:c0:
82:29:4e:1f:ed:33:96:06:a9:72:eb:2a:2f:e7:c4:
5b:0d:17:ec:8a:65:13:a9:1e:36:53:1a:33:4b:cc:
4c:20:3e:b4:4b:9f:a4:2b:3d:12:84:f5:50:34:98:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:B4:4F:00:24:F9:7D:AE:46:EA:D5:9A:EA:19:7D:5A:91:4D:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
X509v3 Authority Key Identifier:
keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:1f0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:a0:99:08:1c:11:65:f1:47:24:27:0e:10:22:2f:2e:61:6d:
d1:7f:6b:fd:54:2f:88:cc:d8:dc:7f:f0:64:be:b1:25:82:a5:
70:48:a9:c4:69:79:2c:da:c5:41:73:5d:9f:b0:aa:8c:26:c4:
98:38:36:d7:4e:1c:11:81:f9:d6:2d:ab:fe:13:54:5e:3e:e4:
81:d1:d3:49:8e:14:dc:bc:96:9a:73:84:f0:39:fa:a8:f2:fc:
8e:99:a8:e9:ce:8f:05:28:36:5f:37:24:d5:ca:e0:f8:a4:8c:
a6:93:d0:bc:a2:86:57:c1:6f:7f:69:96:8c:3b:19:07:34:3e:
06:c4:16:e9:67:03:9d:91:0a:de:f8:3a:5f:c1:4c:ff:60:0b:
df:10:fc:37:a0:93:5a:79:16:81:4d:d6:88:0e:85:42:1a:11:
91:d2:54:ed:f2:eb:7c:3b:2c:7a:00:4b:f7:86:29:0f:0c:ab:
9c:59:a3:fa:5b:89:9b:a8:03:2e:43:26:36:54:20:82:bd:64:
4d:21:32:d8:7c:45:4d:19:4c:f7:44:e3:64:e5:68:8e:ad:43:
6c:4b:0b:be:0b:91:34:fc:a6:d4:85:bc:6c:bc:33:11:b3:b9:
43:7d:51:5d:cf:61:d0:ff:07:88:5f:82:5f:72:86:5e:e6:86:
c4:cc:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:34 2026 by rpki-client