
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
File: 2a070509-9ba8-3201-ae15-b6c4334f1efb.roa (raw, json)
Hash identifier: ON0LiKp/sIj5Mjqo7IKcUkPo4yA4VWgBo3sUMA355T8=
Subject key identifier: 52:92:A4:C9:CE:5D:53:35:8C:0A:EE:69:91:92:07:9D:78:24:6C:06
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584D40CA3F7A2BF71340FAB08400
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 1403
IP address blocks: 2606:6d00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:3f:7a:2b:f7:13:40:fa:b0:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=6e140d20-d921-47f9-9c4c-c36c15d768d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:11:bd:db:c1:6c:76:2a:0f:b0:42:f5:ca:
6a:67:3d:2e:8d:45:62:27:c7:11:04:e9:93:44:d2:
f7:77:72:12:45:a8:d8:04:d8:3e:24:41:b0:90:66:
92:f8:c9:32:db:0e:6a:5a:e7:86:2b:31:1c:55:e6:
b7:cc:72:c8:c3:a2:29:f1:ad:a9:73:e0:5a:af:a5:
aa:6f:cd:f2:10:0c:de:e6:73:39:a5:ad:f0:36:26:
21:3a:b2:fe:d5:f4:51:05:52:fb:f0:1b:66:45:a3:
05:23:76:b1:b3:53:5d:93:f6:99:ae:4b:96:19:d8:
fa:a3:44:8c:6d:b8:d7:29:bd:c3:6c:67:20:57:63:
5d:6e:2d:e1:24:9a:01:e4:6a:c1:a2:21:68:29:82:
3f:f1:69:c3:ba:e0:23:98:70:77:2a:97:b8:20:62:
42:8b:a3:9c:98:ef:fa:a8:e9:69:fb:66:13:07:26:
04:f2:b6:74:fd:eb:95:23:86:a8:21:c7:d1:c6:19:
bc:75:bf:42:93:22:1c:f0:b0:19:6d:a6:16:b3:76:
e9:7f:3c:b8:42:d6:86:69:20:a4:c9:39:1f:61:1d:
de:c0:a0:70:15:24:70:40:bb:f2:04:ed:3c:37:a9:
0f:53:9f:a5:32:9b:ef:e7:c9:11:15:31:bf:e7:6f:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:A4:C9:CE:5D:53:35:8C:0A:EE:69:91:92:07:9D:78:24:6C:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:6d00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e4:23:ca:94:64:41:ca:f0:66:d3:5f:be:5d:62:d3:64:72:
2f:38:fa:29:7b:52:43:09:59:e4:cb:d0:a7:26:8b:e5:58:92:
ad:e8:df:e6:bd:b9:a2:c9:37:86:7b:b5:5d:34:dd:c5:01:04:
df:9d:d2:e8:07:63:42:21:8a:1b:46:4a:36:c8:53:3b:0d:3b:
dd:86:9a:43:95:3c:a1:e3:36:f4:c4:d4:9f:fe:90:f1:a3:e3:
9b:81:03:1e:c6:5d:d5:1d:58:b4:11:ea:31:46:6c:87:de:1b:
8c:29:36:f1:4c:29:f8:78:91:e9:9a:e9:24:7f:b4:36:e8:ee:
6b:57:b4:cd:aa:80:01:74:7b:db:28:1d:c9:e9:72:81:0b:59:
e2:b0:43:a3:14:6c:14:3c:70:1d:a0:a1:d6:ce:db:f3:3c:f6:
b8:f8:77:19:a1:e3:5a:d5:6c:0a:7f:df:e0:8d:3b:cd:08:08:
35:ae:07:83:0a:52:88:22:cb:be:f9:9d:ec:62:6f:f2:e9:72:
5c:ca:64:4c:8f:0e:52:70:5f:bf:4b:45:a3:41:16:aa:a8:53:
d5:3f:ef:63:c3:28:ac:0a:bc:81:b0:21:41:7c:a0:58:8b:4d:
b5:b3:d0:c8:58:5b:54:d7:27:8c:9e:ce:6b:43:57:56:17:91:
a4:7c:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:09 2026 by rpki-client