
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
File: 48e9f760-1601-35b1-9940-8cfc8cac9a16.roa (raw, json)
Hash identifier: yGg0TZsBRzKvCpXr6rr7ey9Gvana1LJlusuMyNMayxw=
Subject key identifier: 76:C5:B8:0B:86:8E:D9:C5:AE:91:3B:26:29:EC:ED:7E:B0:D5:AB:EB
Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial: 010D0C9F4328584D24DF86BDA47D7729CA765640
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 393732
IP address blocks: 2620:11d:5002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 29 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:86:bd:a4:7d:77:29:ca:76:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d5443a14-90ed-4d19-af61-f6e3efcfce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:f4:31:fb:1c:9e:56:33:d0:6b:34:58:bc:
10:12:b2:c2:9d:1b:92:2c:02:8c:d8:14:b5:9a:8f:
8d:fd:e7:fc:7e:50:72:3f:e8:89:06:27:a2:a1:a2:
cf:b0:7a:14:d5:16:e6:9a:69:0f:4c:81:a9:e0:dc:
b6:ac:b6:77:69:e3:b1:2f:20:7d:15:92:00:5f:31:
97:b9:fc:02:71:38:98:8d:d5:6e:79:2a:91:61:72:
10:9e:49:ef:0f:f8:cb:39:13:0d:1e:d7:5c:3d:6f:
50:fa:93:e1:5d:5d:18:06:71:2e:a7:12:9f:f4:59:
ef:1b:e9:e6:90:19:47:f6:17:01:d7:d6:fb:d6:bb:
2e:0b:e8:78:c8:6c:e0:9e:27:a3:4e:6d:7b:b6:8b:
73:bb:99:a7:6c:33:21:61:29:6a:b9:53:4c:0e:54:
b4:d2:28:1c:b1:12:d7:35:9e:95:93:1e:92:22:3a:
81:d0:6c:c4:6c:a4:1a:fb:ae:2a:a4:16:02:66:16:
ea:76:18:19:9b:d6:ac:a4:28:5d:1c:3b:df:c7:89:
7c:31:33:49:1f:78:20:63:aa:ce:13:40:13:52:0b:
26:92:b1:7f:51:cd:b3:a1:6e:0e:c8:bd:bc:d6:6c:
a4:2e:9d:ee:3d:5f:0c:c7:5b:ff:16:03:ce:3c:fa:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:B8:0B:86:8E:D9:C5:AE:91:3B:26:29:EC:ED:7E:B0:D5:AB:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
X509v3 Authority Key Identifier:
keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11d:5002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:25:5b:cb:23:39:e7:0c:73:98:52:44:2e:24:b5:78:a3:d6:
44:a6:97:63:02:90:4a:e5:8a:24:cd:08:4e:a1:af:92:73:c9:
06:48:ee:23:d0:77:9a:2c:b1:34:0d:6e:4b:33:15:7e:bc:91:
76:4f:da:39:0f:56:e3:b4:63:e1:31:07:7f:a3:26:2d:00:25:
c2:93:19:e8:a7:09:6c:9e:cf:c2:e5:f2:4b:67:0d:36:ba:53:
69:d3:0e:d5:62:b9:98:a0:40:71:94:00:ef:62:ca:77:0d:c6:
9c:b7:63:f4:8f:08:e1:17:47:04:8e:83:39:60:f5:34:0f:12:
7d:50:d5:c6:7f:ca:a8:d3:4b:31:02:08:26:97:41:fd:12:a2:
64:9c:1b:5f:31:c0:2a:48:2b:98:4d:9c:e2:00:18:59:9a:2a:
a1:7c:0d:82:e3:ec:1e:61:7d:09:f0:8d:70:15:7d:14:01:b4:
f9:37:0e:4f:56:13:fd:07:ea:8b:38:9d:47:a6:3b:3f:34:31:
67:34:c4:73:cd:43:1b:c2:d4:ce:00:52:07:e4:d2:92:22:f8:
ed:6a:90:15:c8:84:1a:ad:0a:2b:9b:c9:fb:1c:ef:77:a4:93:
4e:32:3f:de:0e:2a:20:2b:a1:c0:f3:49:ae:af:88:9e:65:6b:
e3:b2:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:01 2026 by rpki-client