
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35af0311-8c00-3d75-8cb2-f1200f01aec8.roa
File: 35af0311-8c00-3d75-8cb2-f1200f01aec8.roa (raw, json)
Hash identifier: l49F4I8K7lZs0PE7X3sq2Dw+/1fiVZqVcMzYBAgpCMc=
Subject key identifier: D4:30:8A:64:F2:9F:4F:9A:E2:DA:61:14:EB:0A:A2:45:EA:EA:FB:9C
Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial: 010D0C9F4328584DCF2DF845244F17E272AECA00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35af0311-8c00-3d75-8cb2-f1200f01aec8.roa
Signing time: Tue 12 May 2026 13:06:32 +0000
ROA not before: Tue 12 May 2026 13:06:32 +0000
ROA not after: Mon 10 Aug 2026 13:06:32 +0000
asID: 399970
IP address blocks: 2602:fc3b:ff00:201::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:2d:f8:45:24:4f:17:e2:72:ae:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
Validity
Not Before: May 12 13:06:32 2026 GMT
Not After : Aug 10 13:06:32 2026 GMT
Subject: CN=f3c8e4b1-2315-4ce3-9e3f-3dfdbbf8abe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:cb:c4:cb:67:6d:d7:8f:af:29:d9:1c:8b:
60:eb:c6:80:2b:9b:9d:75:54:f9:61:f7:25:a7:5b:
c6:cc:9f:78:39:dc:28:74:88:6b:0d:4a:f0:8d:17:
8b:1b:ad:f0:3e:4a:09:8a:83:9d:51:26:f0:7f:b3:
ad:da:fd:8c:89:ee:ab:38:bd:70:5b:60:9f:69:c1:
c4:ca:67:b9:6c:a1:8d:f7:98:12:07:95:13:c9:34:
7f:9f:9b:a8:e5:09:12:21:a6:e1:fa:06:37:ed:2b:
06:9a:bf:58:0f:aa:70:2a:85:be:57:b9:19:d6:e7:
98:e3:c5:00:0c:27:df:93:0c:8e:99:96:f1:de:33:
c1:11:32:e4:fb:65:06:56:4c:34:99:11:32:6b:1b:
57:4e:5c:40:7f:df:09:0b:0c:d5:33:d8:72:28:6a:
7d:91:33:2a:a4:f4:2c:cf:6f:ef:cb:01:92:fb:08:
49:71:db:d6:11:05:1e:4d:4e:d9:b8:33:f7:3d:22:
18:bf:b9:41:74:8c:a2:4c:89:83:37:a2:17:ef:47:
5b:8f:31:6a:95:7b:ef:34:77:65:ae:b4:21:ab:86:
93:33:c5:5a:17:6d:59:1c:55:61:43:d0:c9:e2:5c:
ca:46:55:cd:54:18:36:b3:e8:cb:fd:a4:21:6a:3d:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:8A:64:F2:9F:4F:9A:E2:DA:61:14:EB:0A:A2:45:EA:EA:FB:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35af0311-8c00-3d75-8cb2-f1200f01aec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
X509v3 Authority Key Identifier:
keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:ff00:201::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:be:05:7b:b1:0c:32:d3:cb:64:22:8c:38:c9:34:91:48:72:
86:06:31:cc:4d:f0:8b:83:c0:99:f6:c3:d6:fe:95:11:47:f5:
ae:19:89:41:d5:ac:00:d7:2d:25:55:dd:1f:c1:3c:9a:83:09:
12:11:aa:be:14:b0:e4:f0:68:8e:75:7a:d1:b6:97:2c:ac:39:
d9:b7:d1:0e:e9:c0:95:f6:7c:03:e6:11:1a:e7:b3:51:c5:b0:
78:e9:d5:87:50:6c:2a:01:20:8f:fe:dd:3f:d8:09:ec:47:ce:
86:a1:58:fb:bd:7e:e6:52:fa:90:38:d5:5f:0d:01:e6:26:67:
b3:f7:4e:13:ad:8c:1d:a1:77:c4:cd:fb:36:17:29:95:ba:7d:
6b:01:b2:49:e1:5f:40:ce:6f:4b:22:dd:23:57:ce:c8:dc:8a:
52:33:5a:17:ed:cf:b3:f7:e8:25:63:bb:0c:ca:83:6c:d5:71:
05:76:d7:b8:b0:ac:46:4d:ed:85:c8:b1:26:70:f6:5d:80:ef:
1f:3e:f7:14:ad:04:a6:12:35:a2:e5:4a:94:d9:ce:12:b9:21:
02:0c:dc:84:31:38:cd:b1:85:ba:34:4f:45:98:b8:f4:9c:3d:
0a:c7:59:56:c2:e2:b9:7c:ed:84:eb:67:44:f1:45:e0:36:18:
dc:76:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:47 2026 by rpki-client