
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a6417ba-8161-3e79-b4c1-73b64c46e580.roa
File: 3a6417ba-8161-3e79-b4c1-73b64c46e580.roa (raw, json)
Hash identifier: 0PEXP5r2jboU19LBmBFf+kNKrcxf8lbeIKRXm+FgePc=
Subject key identifier: C2:5B:B2:09:7F:A6:D9:D0:4E:81:0E:56:11:FC:9E:72:B0:B6:44:F2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFFBC20CE4F3E8D99E6600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a6417ba-8161-3e79-b4c1-73b64c46e580.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2605:a401:875d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:fb:c2:0c:e4:f3:e8:d9:9e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=48886a71-08dc-4939-bc4f-06e1c4a5517a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:cf:4a:90:5a:83:ba:7e:14:16:a4:0a:cf:
de:25:79:7d:67:7b:cb:7a:7d:fc:d4:c7:b5:ba:93:
f2:ca:20:1b:39:1a:ea:ac:4a:eb:ce:de:60:68:73:
86:65:a8:eb:82:ab:70:da:f0:e8:3e:fa:f0:4a:38:
d3:76:a9:4d:24:9f:d5:7b:e1:60:bf:0b:23:a3:6f:
a6:d0:32:c7:8a:3d:66:4e:6d:c8:bf:e2:e2:f8:6b:
91:1f:d6:11:0c:b5:d4:1c:b8:da:df:82:60:bb:17:
80:93:60:95:a2:b5:64:96:07:8b:41:7f:fc:2b:8d:
11:1a:f0:d1:7d:d7:e8:2c:a6:17:07:76:2d:6f:19:
92:fa:45:61:c6:67:40:84:6d:92:59:10:d9:17:24:
00:8d:a8:d1:6b:05:c3:30:af:05:cc:9c:f0:56:af:
5b:32:43:52:10:f2:a4:e1:c0:61:92:52:6f:04:c7:
3a:ed:30:f1:ea:54:bb:b1:7d:1e:2a:7d:e3:93:ee:
55:4d:b6:89:2a:a3:78:53:32:73:dd:b1:66:e6:fa:
a3:1c:fa:be:c1:29:98:97:4d:f9:e2:b6:60:a1:65:
ae:c8:bf:f2:35:60:5b:d5:77:d4:ff:e8:00:1a:1d:
20:e4:a1:22:98:5b:8f:d8:1d:5a:da:e1:69:2d:3f:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:B2:09:7F:A6:D9:D0:4E:81:0E:56:11:FC:9E:72:B0:B6:44:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a6417ba-8161-3e79-b4c1-73b64c46e580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:875d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:69:14:2c:29:01:16:f3:11:8b:d1:5f:58:1e:dc:82:f5:49:
97:f9:07:44:1d:e3:93:15:58:ad:07:d9:99:d2:f7:b7:28:a8:
2a:c8:e6:5c:90:aa:31:ce:f2:f1:04:58:ef:6a:af:c3:c3:c8:
1a:8c:7e:a3:56:60:fa:bb:a5:f9:d3:75:0c:bb:5f:a7:a8:eb:
70:21:37:d0:9d:16:a0:9e:0d:a1:c8:fb:80:9a:c6:ef:57:94:
b1:68:47:7c:5c:dd:43:73:f7:b4:42:8a:3e:18:06:ca:7c:cc:
91:dd:05:1c:ce:af:d1:d1:99:01:6b:89:6c:31:91:51:62:07:
07:f1:29:22:d9:04:4f:64:bc:0e:86:c7:ab:09:ef:b1:25:52:
d2:79:26:35:24:5c:4f:dc:b4:85:c7:af:c1:75:d9:e6:cf:40:
63:16:c1:42:89:50:87:66:84:4c:3f:55:6a:7f:3d:53:87:d3:
14:8b:92:25:6f:d6:e0:82:56:49:93:a0:8e:7c:fa:95:10:91:
b7:5d:14:cd:63:49:85:de:ce:5f:55:45:c9:38:e9:7d:46:0b:
80:4f:3c:6b:3b:da:0d:49:7e:8e:03:cd:0a:0e:b8:a4:3a:ee:
a5:09:5c:97:5d:d7:f0:96:3d:18:de:09:c7:40:0e:f6:2c:e8:
98:f5:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:18 2026 by rpki-client