
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
File: 868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa (raw, json)
Hash identifier: 6E1AlbPAjw0YWRAy7kS8l4zIKTizf3RCsb2jph3Iqpw=
Subject key identifier: CA:0B:4B:9B:29:80:21:15:1E:2C:20:FD:7D:D1:93:63:B3:CD:CB:9E
Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial: 010D0C9F4328584D4A8F9F7DD38A418C2EF1DEC0
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 18451
IP address blocks: 2605:e200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:9f:7d:d3:8a:41:8c:2e:f1:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=a65f2015-9770-4162-aeca-ab73a5d585ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:e3:62:8a:eb:0e:7b:eb:37:a1:21:75:18:
71:f7:4d:44:02:34:85:50:2e:99:c1:8d:8f:e2:ab:
8c:fb:5b:de:0f:2c:dd:58:cf:cd:dc:db:04:89:6b:
ba:c4:68:b8:77:8d:2c:a9:23:5b:55:36:30:58:9d:
af:f3:9c:5d:59:64:0c:ad:58:3b:49:86:39:45:24:
ba:03:7d:dc:df:38:cd:8f:7c:e4:f2:e3:85:12:80:
f9:71:01:61:3b:c4:5f:62:a6:37:00:96:ca:8f:1f:
0b:33:3d:38:91:70:d5:db:63:39:90:eb:4f:a4:e5:
9d:ea:0b:6d:23:f8:fc:e3:31:71:94:b4:54:1a:c1:
23:95:b0:b9:84:a6:21:a8:1b:22:90:b3:7b:0c:d1:
82:2c:ef:9d:c5:00:ad:4f:2f:26:23:12:ce:5a:71:
f4:19:7d:74:f4:cd:f7:49:03:07:c9:30:73:38:67:
c8:65:ef:39:b7:29:de:77:6f:7a:b7:13:de:23:12:
23:16:e6:76:07:83:53:10:b3:ec:91:09:49:76:84:
9a:3b:ca:84:6a:6c:55:d8:b4:91:d7:99:0d:4e:80:
57:98:e4:75:68:a3:bd:a6:bc:57:4a:58:54:c3:32:
ce:63:26:eb:93:f9:51:6e:a1:1e:d3:fb:49:e1:6f:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:4B:9B:29:80:21:15:1E:2C:20:FD:7D:D1:93:63:B3:CD:CB:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
X509v3 Authority Key Identifier:
keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:8d:60:74:ca:e5:64:15:ab:0e:37:73:04:15:ba:67:77:2e:
ce:fb:1c:08:6b:e6:17:89:85:ae:11:9f:74:2c:31:58:58:45:
55:0f:1e:d6:ce:b6:05:23:55:a8:73:79:d9:23:a2:b1:de:01:
b8:4d:e9:0a:7a:81:25:2d:2c:cc:f1:fb:95:92:5e:84:17:df:
f1:8a:26:f0:17:d0:91:be:41:c2:37:62:26:68:a4:d3:cf:64:
78:6c:e5:77:d2:39:4b:f3:af:fd:60:8e:b6:1e:04:66:fe:57:
2c:82:86:6b:53:7e:6d:31:42:d0:b1:ac:cd:07:a3:c7:e6:ac:
86:01:f6:63:14:3e:41:69:c3:94:e1:89:0b:5a:aa:96:ec:d1:
57:80:df:a6:57:d6:4a:bf:9f:6e:b2:46:8c:3f:1f:65:e2:c5:
25:f3:39:aa:c4:d0:34:22:a8:37:be:e0:5a:6b:da:ee:9d:51:
fd:89:53:65:a6:96:c0:7f:75:57:00:ee:95:7e:0b:fc:bc:10:
1e:a7:c2:d2:ee:a4:01:d9:7c:29:f1:2d:66:57:7e:b0:8e:ca:
f4:f6:b9:06:9f:8e:79:00:05:ae:79:26:71:f6:c3:02:33:02:
49:c7:f6:51:0a:78:af:bc:d3:a2:d8:0a:0d:1d:63:90:0a:27:
0c:b6:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:55 2026 by rpki-client