
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
File: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (raw, json)
Hash identifier: IcxXFXCwEZPuq+5IRklus/ln32BbPJCdJLMv4YrSzHQ=
Subject key identifier: 66:B9:66:20:48:B6:D3:6E:2D:86:56:8A:B1:51:F7:E0:82:69:EA:D2
Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial: 010D0C9F4328584E54B4941F737A43DA22854380
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 60171
IP address blocks: 139.64.228.0/22 maxlen: 24
2605:ba40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:94:1f:73:7a:43:da:22:85:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=4961669b-e518-4093-960b-8b640e390115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:29:f9:b6:9a:96:ac:3e:ac:d6:d1:7b:f4:
6f:fb:97:df:d4:1d:1e:3d:8b:1a:33:b1:ca:ff:8d:
89:63:98:05:93:27:c7:11:25:6e:14:7b:8b:03:0a:
b1:ed:83:7c:c1:db:ab:02:7e:b9:e5:0b:57:b1:29:
6b:a1:3a:ac:c6:1a:de:82:f7:6a:f0:45:7a:95:2a:
d5:0c:7e:d9:0d:7c:16:56:fc:e7:f7:8d:6c:56:0f:
4d:a3:16:e7:c5:c5:21:f7:dd:48:65:0f:aa:1a:aa:
f2:6d:d9:01:88:45:41:30:18:bb:2b:b5:35:cf:04:
5a:57:72:d9:99:8f:c8:fb:36:9c:78:86:d9:8e:a4:
c1:1c:3f:6c:64:e1:76:10:a0:96:0b:c7:0e:cb:09:
2b:6c:35:4b:2e:61:e1:d2:73:67:3e:44:b5:45:7d:
34:ff:7c:2a:4a:48:0b:19:02:38:5a:0d:7f:86:b5:
5e:d7:6c:5c:7b:74:ec:37:1e:75:87:3a:f7:6c:02:
78:30:50:74:29:04:b0:ce:06:f3:ce:54:e5:9f:22:
12:18:a1:fa:7c:0f:6c:2e:5f:ae:70:9c:4d:ee:83:
b8:f8:4d:5b:35:e8:14:e9:45:c8:4e:17:8c:2b:51:
98:7f:f5:e6:92:85:8a:e8:96:49:ff:32:39:ac:f4:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B9:66:20:48:B6:D3:6E:2D:86:56:8A:B1:51:F7:E0:82:69:EA:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
X509v3 Authority Key Identifier:
keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.228.0/22
IPv6:
2605:ba40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ff:dc:c2:41:e6:e9:ac:f2:04:fd:71:3b:85:fd:b3:c0:a2:
5e:22:5e:0f:98:d2:f2:88:08:5a:16:70:06:aa:b3:87:f9:94:
4f:bb:86:ae:7f:ee:31:bb:94:cf:01:41:60:91:17:0d:09:7c:
1d:36:a4:84:25:44:8a:b7:b2:ea:16:df:5f:35:8b:2d:58:86:
0d:4a:54:b6:d5:4d:52:4e:02:35:c8:1a:4e:5e:e2:3a:1e:74:
35:08:f4:09:42:fa:97:74:d9:e9:45:80:93:d9:00:c0:ef:1e:
d0:7b:3a:4d:36:c9:f6:4f:1b:b0:c8:fb:3b:80:98:ff:31:c1:
e9:2c:84:e8:f7:ad:40:2b:62:af:06:3e:95:14:fb:13:72:f4:
fd:86:6b:ec:76:0f:67:21:c0:03:04:2b:0a:ae:93:a5:54:6a:
c8:6a:21:7a:d5:7e:bd:00:89:8c:5b:a7:5d:9d:21:38:ee:db:
3f:3f:e6:e8:bb:0a:75:87:16:56:48:99:bb:19:fc:f6:ef:a6:
b5:cc:9c:14:ff:7a:3f:9e:d9:87:8d:c0:ab:c9:e4:46:a9:cf:
81:f5:b3:26:dd:06:7a:23:d1:c6:3a:70:fb:c6:0e:3a:f1:1e:
d6:38:0a:22:26:e0:39:43:2d:a4:ff:cd:47:7c:c8:c5:9e:1a:
96:35:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:13 2026 by rpki-client