
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
File: c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa (raw, json)
Hash identifier: cRQRVFTZw0IrkrBNi3LFg25IJidGowlkinLVOrkj2Yg=
Subject key identifier: 95:5B:29:A2:24:6E:89:C1:4F:31:B3:F0:39:65:52:3A:EB:12:5A:8F
Certificate issuer: /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial: 010D0C9F4328584D0BDD05186CFEED3367040440
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 36236
IP address blocks: 198.176.44.0/22 maxlen: 24
2604:a680::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:05:18:6c:fe:ed:33:67:04:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=a515a5a4-0999-4143-b60a-bc860f548019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:24:9b:ba:58:e1:1a:af:71:83:18:3d:fe:
40:c9:49:7e:45:a2:e6:8f:34:d9:5c:13:42:54:84:
b4:08:cc:ff:2d:0a:fa:81:ef:52:b7:98:38:c9:b8:
93:85:91:0a:81:73:a6:4e:97:12:d4:bb:36:05:cd:
ac:b5:de:2b:fb:ad:64:39:30:30:fb:ab:06:03:0c:
a3:0b:0d:74:27:5c:21:9c:2c:28:19:be:0e:5a:fe:
46:8c:a1:84:38:af:b2:b2:78:bb:c8:4b:98:72:d4:
fa:ea:bc:24:ba:03:5e:76:a3:96:5f:61:57:4e:a0:
e6:d3:f9:fa:71:11:eb:ee:36:16:1a:25:ae:0d:22:
34:d0:b1:42:63:03:d4:4e:11:3f:1e:c3:5f:f6:65:
20:10:41:2f:97:3e:4c:f6:bd:c1:6d:a6:9e:2d:dc:
da:bf:5d:a6:6c:02:9a:be:0c:a1:60:37:ef:91:1b:
28:ca:5d:5e:47:a5:d1:9b:3f:31:87:6a:e4:e7:84:
fb:42:91:c7:ac:2b:0e:6c:f8:f7:87:0e:c5:d4:93:
95:38:7a:ef:e9:4b:03:e3:ac:72:45:71:2e:63:12:
78:63:30:58:58:04:f5:e7:e7:4f:02:0f:60:7d:70:
b2:09:37:22:8a:2f:35:18:46:f1:5d:d2:29:c2:be:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:29:A2:24:6E:89:C1:4F:31:B3:F0:39:65:52:3A:EB:12:5A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
X509v3 Authority Key Identifier:
keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.44.0/22
IPv6:
2604:a680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:27:6d:7c:6d:db:7c:42:e0:ad:ad:23:e4:3b:d5:22:84:af:
e5:17:be:c6:83:26:d4:98:bf:91:6e:fc:5e:97:45:9f:89:84:
c0:ba:ba:0a:ff:b7:47:6f:cd:3d:eb:f6:e3:85:a8:1f:0e:08:
bf:7b:24:8e:e6:e3:9c:10:82:bb:71:49:67:98:24:ec:41:7b:
df:12:3b:48:5b:cb:51:a0:20:8c:aa:2c:83:90:ec:04:6e:53:
99:a6:55:b9:5b:14:c5:14:eb:09:d1:20:15:e8:60:54:49:71:
c9:d9:df:cd:18:79:ee:77:89:8a:83:63:2d:f3:e1:08:1e:34:
ca:97:fe:5e:cb:a4:88:44:1b:57:40:a5:6d:39:41:a0:ce:40:
05:e7:0d:2e:32:f1:04:4c:5f:0b:d2:44:81:09:cc:8a:96:dd:
10:ef:01:ef:2e:38:2b:03:65:e5:33:12:10:e4:01:0a:58:e5:
02:b1:6a:20:e1:79:e3:74:a0:4a:8d:c3:32:65:0f:cd:e8:27:
b8:b1:02:36:69:75:d5:a6:50:24:1a:16:41:9f:49:b5:3e:39:
26:12:7c:72:f4:00:b4:8a:f0:99:cb:60:a5:e7:37:f2:cc:53:
10:fc:82:56:ea:7e:06:dd:11:45:de:fc:c1:d5:d0:11:07:1a:
77:89:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:20 2026 by rpki-client