
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/496263b6-7c8c-31a2-92e0-2b87ad7a91b9.roa
File: 496263b6-7c8c-31a2-92e0-2b87ad7a91b9.roa (raw, json)
Hash identifier: hvV7aX+Jd9cNTVRhUaxbJP1Mm5yIzwc2EvdNzWRJPwU=
Subject key identifier: 5E:6A:70:04:8D:59:09:6C:83:95:28:A3:74:7F:FB:6D:CF:73:A5:83
Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial: 010D0C9F4328584D4A8F895D75331E66E43DD700
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/496263b6-7c8c-31a2-92e0-2b87ad7a91b9.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 6994
IP address blocks: 2600:7f00::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:89:5d:75:33:1e:66:e4:3d:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=ff25f037-596f-43ea-8b74-c1d0827b9ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:e5:da:96:84:e9:14:b9:26:22:55:11:d2:
d4:cf:da:58:7f:45:6e:de:9c:41:62:a5:d4:80:25:
17:bf:6c:63:c8:c8:32:2d:06:63:b3:e4:ce:d9:99:
a0:9a:b6:36:4c:c7:bd:17:b7:3f:a8:f9:bd:d1:d9:
28:d1:13:3f:52:55:41:73:85:bb:5f:05:3f:d8:15:
c2:91:93:1e:4d:e0:75:f4:0c:7a:f3:f1:8e:01:a9:
fe:ce:c3:6e:e9:2d:1f:af:15:fd:77:ae:18:30:c4:
b9:1b:8a:ca:59:97:6c:b7:a5:0d:66:00:5c:27:d3:
2f:7b:2c:4f:35:0c:ab:52:78:bb:6f:84:a4:c8:f2:
43:cf:86:46:01:f9:2c:49:d7:66:4a:d4:f1:3e:7c:
9b:b9:6b:2e:86:2e:b8:23:c4:c2:15:ed:d7:f7:b0:
99:d5:93:ec:f3:cb:6d:a6:4e:d1:18:09:ee:47:8d:
19:84:bf:a3:df:83:3b:83:a7:62:71:4d:c9:bd:2c:
c9:33:02:70:1e:97:25:3f:de:05:9c:28:7e:3f:c7:
18:1d:47:b2:70:95:c6:66:bd:42:d3:70:40:bb:95:
2f:16:7b:d6:d4:85:86:ab:f8:fc:6d:ef:b9:af:f9:
8f:1b:4c:8e:ff:56:81:4a:11:f2:fb:f2:16:60:11:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:70:04:8D:59:09:6C:83:95:28:A3:74:7F:FB:6D:CF:73:A5:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/496263b6-7c8c-31a2-92e0-2b87ad7a91b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
X509v3 Authority Key Identifier:
keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:7f00::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f4:9f:90:57:4f:65:21:9a:3b:a9:f7:29:4b:ee:ec:ee:70:
e6:4b:e4:67:97:7a:cf:b4:1c:ae:1e:cb:67:c6:00:f7:17:0a:
58:6e:35:8b:4a:3a:43:1b:36:d5:58:cb:2c:e6:99:56:f8:22:
91:30:71:10:36:2b:1d:0a:6f:d5:56:ca:cc:6b:93:19:4a:e2:
0a:17:8d:6c:b2:52:21:3b:d5:e9:cf:80:80:6c:4d:e8:92:3e:
21:6e:eb:11:cc:0f:e4:e2:3f:57:73:81:6f:4c:10:f3:fe:63:
1b:48:2a:a6:c0:e2:71:1a:a8:58:8b:9c:9b:22:6e:08:f9:0a:
51:82:b5:15:a2:01:82:1c:49:76:5b:8b:47:df:cb:75:97:f1:
7b:36:a6:61:81:87:7c:8b:f7:69:f0:85:04:fe:b8:12:b3:cc:
0b:93:64:12:90:71:d5:7a:9d:f2:bb:e3:6a:d3:1d:14:fc:eb:
06:02:28:a0:27:1e:44:08:05:d1:9b:a2:8c:84:28:03:1f:a3:
ef:c6:fa:0b:cf:24:e1:dd:07:31:6c:97:70:de:70:80:26:b3:
fc:bb:84:89:64:c7:9a:d9:66:4f:e2:85:e6:9f:09:ad:57:f3:
d8:11:3c:5e:11:1b:12:0c:b0:89:5e:3e:dc:3d:bd:ac:b2:e6:
21:dc:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:46 2026 by rpki-client