
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa
File: 433031db-4285-39e5-accd-f6fb29f9770e.roa (raw, json)
Hash identifier: c0NbH84KbslTpSiHrIHZCD8uWBIx3teFICWOlRcT8JY=
Subject key identifier: D2:50:D0:DC:53:D2:F6:40:35:7F:7D:C0:99:38:67:BA:CE:E8:F3:AC
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584DC6CAFCB0B98479925EC81E60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa
Signing time: Sat 09 May 2026 13:00:31 +0000
ROA not before: Sat 09 May 2026 13:00:31 +0000
ROA not after: Fri 07 Aug 2026 13:00:31 +0000
asID: 16509
IP address blocks: 2606:7bc0:1064::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c6:ca:fc:b0:b9:84:79:92:5e:c8:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: May 9 13:00:31 2026 GMT
Not After : Aug 7 13:00:31 2026 GMT
Subject: CN=bdc32ce7-ad1a-40eb-b93d-194e9f92a2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:16:5c:79:4e:7c:15:3a:94:4f:55:1b:c0:
eb:ba:51:73:37:3f:27:db:6d:e7:00:36:d8:3b:39:
9d:8c:16:6d:76:37:f7:fb:ae:f3:3a:c9:ef:52:be:
39:13:72:0f:1c:7c:f6:60:3a:09:de:4e:bc:17:b5:
ca:ef:4d:b2:5b:e9:c6:b0:e4:9d:16:2e:8e:e9:3e:
98:1a:95:3e:5c:99:92:c4:8e:99:f3:0c:52:7b:80:
04:f8:7a:e3:6c:17:af:fe:b0:12:3c:ec:1a:78:2d:
2b:38:70:76:40:ff:ae:c3:b1:28:4f:ca:40:65:a7:
d7:a4:55:77:30:99:2c:3a:e4:49:0b:1c:01:54:e0:
72:c7:0e:dc:66:be:61:a1:93:f2:65:89:ab:57:04:
c1:48:0c:d9:55:1d:a8:e5:55:75:ef:9d:18:0f:4a:
21:40:f8:4c:b1:59:7a:2d:22:82:28:0c:9d:c8:5f:
d3:08:8b:71:2d:9c:47:64:46:e7:3b:a8:b0:7e:0a:
38:9f:68:bd:dd:ec:3d:e8:de:94:7d:85:52:8a:7c:
ab:a6:68:df:53:d3:a2:39:14:1f:53:ac:8d:c0:71:
ea:bc:1e:0a:bc:0c:7d:96:aa:c3:af:27:59:dc:eb:
3d:f0:4a:83:cd:bf:73:ff:b3:ae:1a:f0:bf:c4:22:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:D0:DC:53:D2:F6:40:35:7F:7D:C0:99:38:67:BA:CE:E8:F3:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1064::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:67:ff:28:35:54:86:ac:be:42:b7:ac:af:d0:d1:2f:ce:3b:
71:82:eb:07:2d:75:b7:90:20:4f:80:5d:f0:0d:50:2f:4b:be:
ed:64:cd:4b:19:ee:bd:89:3a:e6:25:3d:68:7f:a5:dc:55:04:
3d:02:91:f6:66:3f:a1:32:13:ff:93:16:da:8c:b8:a7:b5:07:
30:7f:43:21:9a:de:cd:72:23:cb:bc:1d:6d:b5:26:29:56:13:
ee:c7:6a:5f:cf:88:9b:12:a3:0f:0b:b2:d5:4b:fe:ba:6f:d1:
3a:7b:a3:e4:32:22:48:d5:dc:71:d7:e7:4e:93:a8:dc:74:17:
85:38:f2:02:11:a8:f0:10:45:e9:cf:ab:46:26:e4:c8:91:79:
9b:8c:35:2e:00:1c:2a:0c:5d:94:e9:5f:7a:95:d7:ce:49:01:
f6:f9:b2:d6:d6:a7:32:ba:d9:0b:fc:42:46:6b:8e:ad:18:6a:
10:bc:63:76:75:f9:f1:a7:dd:35:97:0a:fe:41:eb:47:f0:1c:
d3:90:4f:4e:62:69:87:a4:bd:33:99:19:92:1d:05:19:c7:61:
5d:2f:8b:70:e2:1b:d5:78:7b:49:75:dc:13:df:17:43:19:13:
fb:e5:d0:4a:20:44:92:80:4b:1d:c9:c1:15:82:a7:40:59:7f:
47:91:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:45 2026 by rpki-client