
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
File: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (raw, json)
Hash identifier: gUAQ+XhXyfeKJhSHnjJGHRyzNG98M+LWgOThJrKkFIc=
Subject key identifier: 2E:75:5F:FD:C2:85:0B:8F:92:8B:33:2A:EA:AC:08:E1:22:6E:ED:B5
Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial: 010D0C9F4328584E6144A92A84B62EC27D2F7C00
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 212149
IP address blocks: 2602:fbf5::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:a9:2a:84:b6:2e:c2:7d:2f:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=406ffafc-9259-416d-a815-07c9c7836251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:6e:14:94:57:53:a0:c7:26:a8:2e:2f:4f:
71:86:a6:0a:75:22:4b:71:d2:c4:32:64:15:e5:36:
a7:f8:b9:3a:02:76:4b:5e:3e:2a:06:c0:9f:d1:17:
0b:69:cf:d6:53:85:53:2d:42:47:ae:d2:b6:97:cf:
d3:8f:bc:48:43:64:c6:62:a6:f4:84:f4:fc:1a:54:
0c:48:53:5f:4e:d3:67:50:e8:8c:fa:05:cc:87:e4:
2b:e2:10:0c:e9:5a:98:8b:b0:94:d1:87:5c:f5:24:
43:39:ce:ff:01:db:ae:2b:60:03:76:3d:92:a1:bf:
fc:48:41:c2:20:8c:a4:de:ad:55:2f:56:19:62:0b:
3c:f0:80:95:a5:0f:01:70:99:ea:99:aa:28:47:92:
9f:79:83:3a:c8:08:db:67:65:af:6d:ed:fb:92:74:
64:d3:c8:50:f0:e3:d8:cf:82:59:1f:47:68:2c:8c:
c7:f8:7a:ff:04:b2:32:06:8d:b5:06:fd:03:28:4e:
dc:a7:47:4a:30:9b:64:21:d8:ea:20:c1:5b:b8:55:
b9:32:1b:3e:7e:1d:1c:f4:21:02:f2:f2:93:ff:9a:
e7:2f:4e:05:74:21:52:a5:7b:58:8a:44:5c:9f:f4:
70:58:60:1f:e2:5b:b1:87:27:b8:41:49:dd:42:ac:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:75:5F:FD:C2:85:0B:8F:92:8B:33:2A:EA:AC:08:E1:22:6E:ED:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
X509v3 Authority Key Identifier:
keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbf5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:0e:9e:76:77:32:b5:34:d4:e4:15:5a:22:3e:60:39:d3:66:
fa:0b:e2:a3:28:45:2b:c1:aa:08:68:13:f1:ae:e7:ac:9e:13:
2a:26:d0:2c:72:11:29:47:80:ae:47:18:4a:db:d5:ad:22:4e:
9f:be:a7:86:e7:9f:d0:ef:f5:49:df:57:88:b0:2c:9e:a3:2f:
8f:43:4e:ee:c1:fa:d2:9c:20:e0:86:e0:b4:29:74:ba:ee:4a:
32:0a:1a:ee:7c:ae:a8:a1:00:06:15:9c:e3:a4:0c:6f:53:92:
04:23:af:d2:bc:f7:24:bc:1d:55:0d:e4:3e:be:ab:3e:17:42:
56:0a:e6:88:2f:71:37:87:65:07:92:a8:9a:19:b5:d7:bb:7f:
75:c7:14:ec:44:30:ba:45:45:79:11:67:c7:35:51:7f:73:87:
c4:61:aa:9c:2f:25:b1:62:c5:7e:92:d3:c2:46:91:d4:7d:21:
fe:70:e1:6c:c1:3d:33:ed:c0:7d:d9:99:4a:93:87:de:86:10:
f5:93:b9:de:bd:9a:f4:2a:61:19:90:19:31:9d:3a:53:1f:f8:
24:7c:6c:fc:b7:d7:18:47:69:9e:17:8f:33:48:4b:72:8f:59:
df:bc:1d:9d:3b:6d:a9:77:b0:a1:78:96:bb:99:ba:73:f9:26:
c2:6e:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:30:47 2026 by rpki-client