
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa
File: 3bab386a-a864-3a16-a4d2-095896d544dd.roa (raw, json)
Hash identifier: SsC5Km8YRdThKMHNsYqWink24U8MK4ZVI5lBW772beM=
Subject key identifier: 6B:F5:AA:CD:A4:64:5D:94:36:76:D2:56:4E:D3:C5:C1:CA:0C:64:F8
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584D24DF90E13359D23F04974150
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 3356
IP address blocks: 2607:f028:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:90:e1:33:59:d2:3f:04:97:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=c4123374-b361-4a62-8841-8c3aa851e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:d2:7f:79:e7:61:41:57:e4:7c:a6:94:8b:
90:d9:e5:64:38:87:a0:7f:33:67:3e:c4:08:e7:02:
37:c6:a8:18:32:47:4c:86:fb:6b:bc:f6:97:27:cc:
1c:2b:0b:05:9b:1e:f9:7d:b6:68:f7:eb:5a:c2:c2:
25:94:3d:6e:23:ad:98:ec:0b:a6:1b:05:90:84:70:
88:d4:b8:f8:99:3f:ae:08:c8:4b:5b:69:4d:1a:2e:
a5:81:45:cf:16:d2:78:35:16:c4:7e:49:82:b9:7d:
b5:a6:b9:52:a7:43:4d:9f:d3:b9:6f:ce:b0:cc:0b:
74:cd:74:1e:32:cd:6f:b2:be:5f:de:af:70:4c:1d:
34:2d:e9:62:b4:e1:47:fb:ed:47:04:f8:4c:a6:d8:
b2:f6:a8:04:0e:d2:52:92:95:ff:bc:27:1a:a6:f7:
23:fa:25:8b:f7:60:41:19:fb:dd:e3:1a:a1:83:dd:
5a:f7:dc:95:9c:19:6a:13:da:40:9b:91:46:38:4b:
d0:ac:8f:fd:1e:f0:2c:e0:e8:6f:2b:9c:8e:55:80:
ed:46:b8:32:d5:e7:bf:ed:54:3c:a9:96:67:30:f8:
1d:d9:67:d0:aa:93:3a:f8:a2:4a:a9:b5:cb:2d:ed:
66:b7:19:2f:60:56:06:f7:55:7b:5f:d3:1e:d0:3f:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:AA:CD:A4:64:5D:94:36:76:D2:56:4E:D3:C5:C1:CA:0C:64:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:22:a7:6e:f1:a5:2e:b3:86:42:f1:44:09:77:af:76:15:62:
18:8c:f2:c6:d8:11:95:ca:82:fe:c1:08:fd:d1:28:5f:a7:a1:
02:b4:e6:3a:db:fa:96:ea:61:05:bc:09:07:49:42:42:64:51:
cc:c4:cb:10:f9:19:04:9c:87:f2:90:6c:56:b9:1e:20:e2:d6:
e5:1b:91:31:b5:86:ca:ee:f7:6b:35:eb:0e:ee:ed:f9:30:00:
7b:5b:07:39:3c:bb:2c:96:64:a7:fe:6b:5d:b9:fd:3a:1f:c8:
f5:c9:41:f7:bd:52:fb:a4:80:a1:9f:ba:fa:78:46:1e:de:d4:
03:dc:3b:ae:a8:48:5b:05:48:2a:c8:3c:ca:14:a0:af:30:ca:
21:c6:4f:87:8c:b1:c2:f8:9f:bc:96:19:c9:f7:27:fb:c8:d6:
da:64:d5:ea:fe:fc:de:ba:0e:0c:ba:da:7c:99:cf:9e:5b:7d:
38:e3:ce:1a:4f:01:c3:94:36:ea:6e:b4:09:d0:6a:d0:1f:84:
e2:a5:f0:2f:7d:62:d1:a0:df:76:f6:35:7c:b5:76:d9:dc:36:
a6:15:b4:a3:da:0d:e9:e6:95:c1:ae:c3:e1:08:eb:81:f3:d1:
88:62:5b:a1:ca:47:41:21:0a:ff:20:0b:a6:6c:8e:c6:ca:af:
07:05:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:16 2026 by rpki-client