
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
File: 38008c1c-3702-3dd3-986f-3285b2a1ad67.roa (raw, json)
Hash identifier: 2uaG2bQoDlbZ+D1jw46wA2bCx6w4DIPcDiH3/kiuQ2Y=
Subject key identifier: D5:DF:C7:F6:A9:E7:9F:4F:44:F1:9A:E4:EA:7C:C7:78:20:66:A9:0C
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFF3BC01F52FBEA7890F4C
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2607:f098:50fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:f3:bc:01:f5:2f:be:a7:89:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=e22e7827-87f6-4aeb-b3f9-b4bdea7d396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:88:69:01:a3:1b:6d:a2:12:32:c5:48:c7:
fd:29:4d:33:a8:7a:c4:4d:8c:c0:d4:f3:70:8c:d8:
ce:cd:a6:d8:02:e2:96:ee:8b:ac:4b:8f:50:2f:0f:
1e:ee:5c:1a:db:65:d6:38:67:55:91:fd:a4:df:f0:
95:36:30:cc:65:f5:22:66:6e:a5:4d:78:81:1a:d7:
4a:c6:2e:77:29:98:b7:de:c1:f8:34:9a:e9:79:f9:
ca:3a:68:b5:26:f6:23:0b:e9:11:a0:e2:c1:6a:96:
af:7e:ca:fe:bd:42:bc:fc:4d:09:f4:89:e6:58:67:
09:c3:1a:d4:08:48:00:65:00:65:eb:f2:33:e2:d8:
9c:d6:6f:c5:19:77:f4:ec:27:b4:32:34:92:e4:c6:
0e:e9:f0:37:28:15:ad:16:2c:4b:e7:b4:50:78:34:
81:47:3d:9b:0a:72:fb:06:44:c0:9a:a6:f4:2c:d0:
25:a5:31:ba:cf:09:4d:28:ce:25:52:f4:d5:66:69:
a7:0a:c0:f4:7c:ef:93:0f:d8:77:dc:a3:da:fe:26:
56:fc:2b:e9:43:05:41:0a:1b:12:85:06:04:ed:8f:
6a:ba:02:3b:d8:18:e7:27:27:38:71:e6:cb:1f:37:
1d:bf:35:22:8d:2d:61:99:73:45:fb:ab:46:b7:da:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:C7:F6:A9:E7:9F:4F:44:F1:9A:E4:EA:7C:C7:78:20:66:A9:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f098:50fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e3:36:6b:4f:77:34:31:ad:b7:1f:5e:61:e8:0c:2f:3c:05:
fa:85:86:f4:cd:7e:db:ee:56:f2:72:be:75:52:9e:28:d0:c3:
72:2b:90:e8:86:2f:08:b1:85:e5:dc:8d:b4:be:de:9a:5a:ff:
f4:48:b3:93:6a:54:4a:52:c5:de:f6:26:97:69:77:a9:6d:87:
b3:e4:84:00:cf:74:eb:2a:01:fe:51:db:30:0a:ca:62:af:41:
7b:dd:69:cc:8b:5e:b9:7c:fc:09:7d:10:70:c6:be:6a:dc:63:
b5:31:36:96:f5:33:4b:b6:15:b1:fe:e3:cd:14:e9:be:24:60:
6b:a0:fb:e0:ac:f7:b5:f1:5b:a3:51:34:8e:10:01:01:13:94:
b6:b6:3e:e8:74:a9:70:f3:71:00:58:61:0d:1d:e0:90:1a:43:
c9:6a:9b:f9:e8:3c:f7:ba:96:50:0d:07:c9:5b:6e:01:ee:88:
0d:76:71:b5:54:3b:c1:c7:5c:f0:a9:4c:77:10:df:6b:2a:37:
f1:92:27:08:e6:65:ab:e0:5f:66:fa:b2:0f:01:bd:0d:a5:6d:
57:f0:3d:ec:00:78:90:c8:b0:64:ce:56:14:0d:44:f5:60:79:
2a:a6:4e:44:93:d3:26:0b:5e:b5:3b:3b:83:5d:95:ad:b4:4b:
d8:89:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:52 2026 by rpki-client