
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa
File: f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa (raw, json)
Hash identifier: JOc4v23HpqaitsuXkLLi/l0mSyYudGATeok3IcfDw3E=
Subject key identifier: 04:02:F3:5F:B4:9C:7C:42:BA:46:EB:F4:6F:F4:DE:E0:65:D0:78:97
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F4328584D19B4E2F4F710E2B33576C000
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 16509
IP address blocks: 2605:b040:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:e2:f4:f7:10:e2:b3:35:76:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=dd8a7dd8-9f59-423c-9928-06d35b5aeabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:4a:45:55:70:b4:da:c0:93:0b:dd:59:f3:
ad:63:63:65:c7:8c:77:f4:2c:01:21:63:0c:c2:4a:
16:97:96:eb:c2:c6:b4:18:4a:c8:e6:e7:ce:c6:18:
aa:79:07:e0:92:7c:c2:e0:72:dc:98:7b:a2:73:88:
88:7a:d1:64:85:ea:70:83:16:e5:35:39:76:4a:e8:
a8:9f:20:d5:b9:ad:e2:0f:07:d3:a3:78:ed:f5:fa:
e3:8b:5b:a2:01:80:ce:42:d7:f8:0e:e1:56:97:30:
ac:64:12:75:9d:7c:18:69:90:c7:a5:8a:d0:d6:69:
8c:bb:d0:1d:8b:93:1f:c2:39:88:67:2f:23:92:12:
ee:c4:ec:6e:35:d7:fb:c8:1b:af:45:a6:c1:c4:f4:
24:24:04:35:e2:8e:b4:92:7b:52:ab:74:c2:b4:a8:
bb:6d:19:4b:3b:da:da:d5:fe:e3:fd:0f:5f:42:ce:
f3:d3:78:91:45:4b:de:0a:c0:7e:67:84:22:4d:d5:
6f:85:4e:8c:04:71:0b:8c:fd:e5:bf:38:bc:f3:b7:
c2:76:1c:7c:72:41:c4:d1:9f:3a:3f:fe:c1:d1:da:
74:ec:a2:36:1d:2d:92:e5:a8:2b:d9:5a:b0:9f:79:
42:01:24:0f:de:b8:95:ff:c7:08:d6:a8:3a:eb:8f:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:F3:5F:B4:9C:7C:42:BA:46:EB:F4:6F:F4:DE:E0:65:D0:78:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:b040:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d8:d9:b2:3c:f2:db:6b:be:79:c0:da:dc:cc:ab:11:a2:60:
3a:ba:69:87:29:33:c9:73:49:4a:54:90:86:8b:90:98:04:b2:
3c:41:e2:56:e2:9a:48:5b:40:d6:19:0f:6d:3c:5c:cd:cc:48:
04:5f:bb:ab:46:24:03:f3:fe:44:24:df:2c:54:f4:af:f6:92:
d2:9e:e6:1d:7d:a6:b9:64:e9:64:02:71:20:24:60:0d:71:52:
2f:e3:08:e4:9a:71:6c:eb:7e:70:ad:1e:45:ac:db:d4:04:f8:
f6:4f:38:01:28:87:6b:46:35:63:f9:85:f9:44:fa:89:c4:29:
73:b1:4b:85:ca:94:93:d6:5b:25:e1:e6:ac:b0:37:ce:39:2e:
32:60:e5:1e:ce:72:b5:23:45:7f:92:32:ae:9b:b5:64:34:f0:
0e:f1:01:ea:b3:e1:39:7a:e7:42:dc:92:d7:f5:4b:72:08:8e:
43:52:96:7d:7a:d7:ef:06:2c:7c:80:c0:37:53:99:7c:7d:c7:
fb:73:d7:dc:30:27:e9:1f:0d:25:15:a7:66:bd:a2:67:35:32:
fe:56:88:ba:a6:c3:45:c8:5e:5d:1f:fe:89:8c:1b:eb:ab:48:
d1:fe:07:ef:b6:ae:f0:7c:ce:1c:c5:d5:26:70:15:38:b3:75:
17:94:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:43 2026 by rpki-client