
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
File: d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa (raw, json)
Hash identifier: YLMf6hFRuSXHAvn0Lme2jq6R6yRAdJpJ5cAccadep18=
Subject key identifier: 2E:9F:B6:B4:B0:29:CB:05:85:84:04:9E:DD:8E:A3:7D:3E:83:5A:BF
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFE5F0CA0434CA5E5532C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 11955
IP address blocks: 2603:90bd::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e5:f0:ca:04:34:ca:5e:55:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=a5853c57-d331-49fc-bda9-3005af7823c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:f6:cc:6f:c8:a4:6e:8d:d7:b0:0a:6c:2e:
51:e0:03:7d:93:3e:e8:ca:11:39:6c:b7:c3:86:9a:
d7:96:93:35:db:6e:2c:7e:de:02:cc:6a:6c:6e:7c:
9c:27:18:b4:6d:25:49:d1:93:12:ed:b8:40:2e:db:
69:56:35:a4:1e:ed:8f:b3:15:ea:51:25:09:69:d6:
fd:75:36:f2:0c:f0:91:4c:fc:c2:cd:42:9e:ba:2b:
19:71:06:a1:99:03:52:d4:92:05:7a:30:52:60:db:
70:df:16:a5:65:87:01:a6:88:48:28:ea:eb:8e:41:
24:2e:cf:42:82:42:1f:70:31:c7:f7:bb:e7:e1:58:
d7:25:e7:00:6a:01:a7:7d:02:21:d6:79:e5:81:65:
9b:87:28:ca:29:40:7e:0c:cb:49:c2:cc:0d:45:e5:
42:81:31:f7:08:b7:3a:6f:53:f1:a4:30:57:e1:18:
d4:cc:3a:e7:b8:d0:83:c6:07:07:16:33:98:05:9c:
1a:ec:1a:6e:2f:46:ef:99:20:f9:6a:13:42:95:35:
a5:27:41:cf:6f:c4:a7:52:51:13:92:10:e3:0d:ec:
a3:68:a3:8e:44:cd:70:51:bb:7e:08:a6:0d:f1:dc:
98:0e:5f:5e:68:7a:a0:1d:91:a3:5b:54:68:45:1e:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:B6:B4:B0:29:CB:05:85:84:04:9E:DD:8E:A3:7D:3E:83:5A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:90bd::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:7a:87:4a:2a:27:2b:0c:d4:cc:7e:a2:c2:41:cf:77:6d:df:
21:17:3a:9d:7f:38:88:40:f4:1b:d1:03:09:91:14:a2:00:8c:
c3:d1:03:b7:6b:65:b2:ff:b6:1a:05:e9:92:75:38:b1:eb:f3:
47:21:c1:81:5b:9d:83:96:00:f6:2d:26:da:ee:cc:b4:ab:02:
e0:f9:79:f9:a0:7e:0b:3b:78:15:7a:f9:59:94:d0:9b:9a:78:
c3:54:e4:89:92:72:2d:24:16:b0:bb:0c:96:c4:dc:1a:8b:ab:
71:2e:96:4d:22:73:28:a7:31:ae:e6:b4:69:42:fb:b1:91:50:
f1:ca:cc:a2:1f:9f:10:06:fb:1e:eb:e3:e4:d2:03:5e:72:ce:
de:66:1b:bb:39:ad:90:e9:92:06:6e:3d:8b:43:a3:40:a2:36:
d8:75:18:a3:26:8e:6a:b6:4a:b5:bb:82:4b:42:32:a9:41:f7:
e1:a4:fb:8d:a9:e1:08:ef:72:ad:ab:8b:b9:ca:3f:54:40:55:
5e:ed:96:44:57:54:d0:40:22:85:34:95:44:b8:05:f7:b9:7d:
24:e6:6e:5c:31:86:57:47:58:05:ac:7c:e1:ea:22:60:af:0e:
10:a1:36:73:85:1d:9b:47:56:62:b1:a9:ad:bf:00:e5:26:27:
74:ce:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:11 2026 by rpki-client