
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa
File: 2853e4cd-1d64-3bad-b983-48f99d148a6a.roa (raw, json)
Hash identifier: Sj3cKBgRT8vqMDg0DVM6ilXqFrdRUlbGmhNnh5jg0fk=
Subject key identifier: FE:87:4E:92:E2:33:50:D4:BC:71:AD:26:E7:0E:5A:C7:1B:1C:6F:F2
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F4328584DCC605901D57B9336AA5B14C0
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa
Signing time: Mon 11 May 2026 13:00:31 +0000
ROA not before: Mon 11 May 2026 13:00:31 +0000
ROA not after: Sun 09 Aug 2026 13:00:31 +0000
asID: 16509
IP address blocks: 2620:a0:200e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cc:60:59:01:d5:7b:93:36:aa:5b:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: May 11 13:00:31 2026 GMT
Not After : Aug 9 13:00:31 2026 GMT
Subject: CN=45e1d264-96f8-4fe5-b987-adfd52720d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:57:5c:0a:bd:70:04:93:02:30:76:4b:26:
d2:95:f1:3d:d1:e7:61:08:7c:29:ad:bc:75:c9:8a:
d5:5e:63:67:ae:75:2b:97:c3:54:52:f2:5e:43:b3:
10:6a:47:bf:4a:cc:9e:99:bd:b0:60:78:b5:64:09:
31:22:23:66:78:e2:11:5b:3e:9e:c6:36:83:00:f3:
31:6b:48:e8:f8:bd:03:0e:02:79:ee:77:29:b4:80:
08:0d:b5:d1:6e:3d:38:b3:18:9c:1f:be:d6:18:4b:
a7:f7:14:9b:28:a7:db:42:90:b3:ac:e7:3d:91:c6:
04:e9:d5:53:f5:15:c7:3d:33:9a:01:2e:40:86:18:
e8:8f:03:92:64:e1:86:92:97:41:02:42:86:3a:94:
e9:79:3e:62:6d:9f:df:b8:2a:7f:5d:5f:15:6c:a2:
0c:70:d3:a0:bd:d2:d1:65:23:82:54:86:e1:c7:d0:
4e:a5:55:fa:ac:25:de:74:dd:b1:a9:b2:48:3f:08:
7a:09:f6:49:ee:d8:cf:78:b4:81:51:1f:cd:3c:90:
1b:eb:61:42:28:83:a0:28:4f:ef:1c:78:6e:dd:3c:
cd:6b:a3:55:3b:ea:ed:4f:fe:3b:69:3b:3d:aa:86:
3d:dc:67:f2:28:03:46:cc:73:12:5a:95:c5:98:cf:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:4E:92:E2:33:50:D4:BC:71:AD:26:E7:0E:5A:C7:1B:1C:6F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a0:200e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:e4:51:3d:35:87:92:fa:3a:8c:78:75:4b:3d:09:6f:79:2f:
9f:2e:48:45:85:65:a9:7a:87:7a:0a:f8:84:cb:0f:eb:c7:ec:
b7:91:0d:d2:56:9a:07:5b:5c:24:28:e5:a3:db:53:d1:42:17:
6a:15:e8:20:42:ce:97:48:76:9c:bd:bd:01:86:18:02:21:ff:
06:ae:5f:bb:d3:f2:c3:24:8d:5e:6d:e2:fa:6f:69:48:e4:8f:
fb:ff:98:1b:cd:e8:bf:4e:43:9b:7f:26:de:f0:4e:d4:c3:36:
ae:39:4c:29:66:98:9a:e0:19:03:7f:c7:7e:f3:8c:de:de:47:
0a:ae:af:6d:22:fd:3b:8f:89:fc:38:82:e5:d2:38:99:9b:a8:
d2:e7:0a:4d:fd:05:1a:27:2b:cf:cd:f2:8a:c4:f2:83:8c:a7:
f3:99:01:bb:75:c5:0a:21:d3:f4:90:9a:e8:b3:f2:9e:b7:87:
27:ad:99:d7:a1:f8:3d:be:65:aa:aa:79:0d:7c:0c:76:de:12:
ec:ba:a6:1a:10:01:c8:ef:ed:ad:8c:4a:af:40:bd:38:79:45:
3d:19:a9:31:04:77:47:b6:99:53:5f:b3:67:51:dd:12:34:f3:
60:83:6a:cd:c4:03:9e:d6:44:4e:2c:49:cd:66:68:c5:0a:89:
76:f3:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:17 2026 by rpki-client