
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
File: 2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa (raw, json)
Hash identifier: GUYa9eJnB8FeRkeuVz56oS/D4sj+IyCShZfIB+z7WXo=
Subject key identifier: 58:3F:0B:E7:79:25:01:64:67:4D:98:64:06:98:A8:23:D0:1C:A1:7E
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584DB4A5840BBA6179223A2C0B80
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
Signing time: Sun 03 May 2026 01:00:23 +0000
ROA not before: Sun 03 May 2026 01:00:23 +0000
ROA not after: Sat 01 Aug 2026 01:00:23 +0000
asID: 16509
IP address blocks: 2602:fa28:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b4:a5:84:0b:ba:61:79:22:3a:2c:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: May 3 01:00:23 2026 GMT
Not After : Aug 1 01:00:23 2026 GMT
Subject: CN=c80d5e06-18da-4a0c-bb3f-caa5db7400b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:10:e3:2f:7f:e3:27:e5:c6:2b:f1:b7:b8:
fd:e1:97:b7:95:92:c5:f9:70:71:b0:32:0c:f2:30:
a0:c2:71:38:62:8d:8a:cc:9b:3f:46:da:1b:68:07:
7a:7a:e3:85:2e:87:bc:ae:a9:2c:39:fa:4a:c0:17:
dd:77:0a:31:c5:e3:3b:e6:0b:b1:83:20:d4:3d:25:
df:52:53:66:13:de:d9:3d:40:22:ee:52:db:64:a6:
ab:b2:89:53:79:37:8a:e8:20:bf:4a:9b:f7:b7:7e:
77:aa:02:26:aa:75:0e:1f:69:b2:69:ad:3b:93:de:
1f:3f:1d:1c:67:c2:bc:fe:db:c9:c3:b2:23:e3:fe:
ac:95:06:8f:7d:19:37:6a:ea:72:ca:4b:3a:7e:bf:
6f:76:d9:3b:8f:96:28:7b:6e:6d:95:10:65:eb:6d:
f7:02:0a:cc:3a:9e:ec:c8:42:51:6e:04:f9:67:8d:
d7:aa:78:b8:7c:a1:8d:8a:74:ee:d9:ae:6d:b9:72:
ee:a2:99:e4:c7:56:ab:27:d5:ee:f8:94:e1:6c:10:
54:90:da:6b:e0:a0:60:f0:b3:cc:cb:e0:9c:e4:3d:
44:8d:d3:4f:d5:59:87:e9:4a:c2:58:9a:9e:43:d5:
6c:0f:a0:29:a9:3d:03:9f:69:0c:77:62:c6:17:9c:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:0B:E7:79:25:01:64:67:4D:98:64:06:98:A8:23:D0:1C:A1:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e6:b2:4b:60:b5:7a:09:53:36:f3:19:f0:c5:79:da:06:bf:
60:32:54:9b:ad:f7:a9:43:e6:bb:b9:f5:fc:08:ce:7d:82:1f:
66:76:85:d3:ed:fe:5c:8b:91:79:c1:89:2c:44:48:d7:6e:09:
5a:45:02:7c:6f:ba:6e:91:91:a5:76:58:9f:ef:c1:f5:7d:52:
bc:a9:68:86:9b:f2:26:8e:c1:4a:2d:83:8b:00:1f:60:d5:4c:
40:e6:32:2f:9a:dc:9d:ca:21:b2:09:c6:b2:dd:80:0c:90:36:
ca:75:64:ee:46:ac:fc:4c:c9:07:91:8b:e3:b0:b3:fc:1d:2b:
34:8d:d8:de:9a:4e:2f:8d:f3:a9:8c:44:d2:71:f3:9c:06:a9:
c4:01:3c:26:be:67:a3:09:94:f1:52:e9:59:cc:c3:63:c0:b5:
d9:ea:80:df:99:53:bf:00:1a:16:cf:df:2e:d1:2c:4f:1a:b8:
82:64:56:a7:8e:af:20:de:a5:d3:32:8f:57:24:82:0c:86:75:
f1:31:31:f4:9e:7c:21:b2:d8:95:5a:82:56:16:22:ac:13:10:
8f:d3:2f:c9:49:88:42:06:58:22:8e:9d:95:d3:4f:b3:8f:9b:
73:89:fe:30:de:86:3f:29:88:a5:b7:88:83:63:d2:3b:6c:a3:
e6:8a:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:07 2026 by rpki-client