
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
File: 0d8ac99f-834b-392d-8de0-99e74008bf17.roa (raw, json)
Hash identifier: UZjz0Ng+nGyssih5si55cHna2/n/4PC+WhB1Pdyw8dg=
Subject key identifier: D2:1F:1E:88:66:D1:0D:06:FB:61:DB:A0:CC:81:0A:8F:3B:0A:69:12
Certificate issuer: /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial: 010D0C9F4328584DC565942E43E1CF1726906CE0
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 396319
IP address blocks: 2601:1300::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:94:2e:43:e1:cf:17:26:90:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=5519a1a2-b31f-4e4a-9d96-8cd8122ad606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:a8:57:ff:7b:88:56:3f:dd:98:9c:e8:3d:
73:d9:d7:4e:b4:2e:73:39:55:c6:35:b7:03:76:8e:
75:5e:ad:0e:f3:33:af:45:33:78:79:60:23:15:e5:
0b:92:1b:10:25:74:86:81:20:c9:2c:37:f2:30:37:
5c:52:23:f5:f1:f6:a8:05:63:ba:09:71:01:37:c7:
b2:5f:34:48:df:ea:45:05:57:27:5a:ff:e7:00:e9:
0b:04:0c:a6:eb:29:a0:d5:26:a2:df:c5:43:73:43:
14:d8:af:8a:cc:2e:58:76:cb:16:ee:1f:66:bc:1b:
ed:54:7b:b1:17:d3:81:24:0b:94:df:42:51:a8:87:
dc:32:3e:be:b8:43:91:9c:6e:6d:8a:8c:63:dc:cf:
ba:ad:56:74:9b:91:74:9e:65:cd:b1:cb:5c:59:f8:
5d:97:42:4e:44:fe:a5:66:c3:1e:4a:3d:33:3d:bf:
0a:6f:b2:ef:f1:28:09:6b:ac:47:df:7c:63:f3:d5:
e4:47:0e:76:eb:ef:8a:54:38:a0:b1:b1:61:ad:13:
37:e9:56:02:00:b0:8d:25:6c:83:cc:05:01:90:61:
55:86:c5:e1:2e:8c:1d:ba:4d:4c:c0:fb:aa:be:5e:
f1:fb:c8:8f:d4:15:4a:33:ac:35:16:88:16:95:7f:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:1E:88:66:D1:0D:06:FB:61:DB:A0:CC:81:0A:8F:3B:0A:69:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
X509v3 Authority Key Identifier:
keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:1300::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:63:60:a5:b3:7c:e9:1e:13:22:27:38:bd:f9:c9:62:f2:74:
2a:09:58:42:29:05:9a:3e:ef:9d:f8:87:71:ca:40:e0:d1:f9:
6a:6c:f1:9f:69:ce:77:30:ce:bc:22:cb:14:69:78:bf:b0:cf:
9e:56:14:29:b2:32:90:08:c8:e7:89:23:7c:ba:36:ce:7d:c2:
66:6f:24:31:a9:2f:7e:f0:97:01:28:ab:7c:f6:95:71:12:30:
a2:cd:14:e1:10:12:51:dd:1b:f0:35:7c:98:b8:8e:11:72:41:
81:e1:38:62:ff:3c:d9:cf:f6:42:70:4f:4c:7c:10:cf:1c:c7:
09:49:ca:3c:47:f6:66:05:12:c0:63:3d:06:06:b5:60:37:93:
77:7e:67:fd:93:2c:5b:f8:00:35:2a:58:cd:ad:01:94:2f:30:
84:f1:53:02:99:21:b6:a6:99:ee:91:76:6c:b2:24:f7:86:5a:
26:6f:cb:62:8c:b2:af:3b:e3:45:2f:c1:e1:fc:d6:de:98:a0:
7c:fa:74:a1:7f:2f:01:9f:4b:df:f0:25:6d:a9:33:5c:3d:c3:
d9:4f:20:0c:4b:58:dc:c2:c9:7f:9c:21:a7:df:b6:08:c4:7d:
c2:f4:1b:3b:35:a7:f0:e6:cd:4f:03:8f:60:93:0f:0f:1b:df:
3e:dc:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:52:27 2026 by rpki-client