
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/2cd42d13-89ca-3019-8d69-c71a6b961632.roa
File: 2cd42d13-89ca-3019-8d69-c71a6b961632.roa (raw, json)
Hash identifier: K1zMgMcFVaEOReq6bS6IR3x762ZDwGjYUGtE2t81Udo=
Subject key identifier: 08:62:01:99:47:E9:8E:9E:2B:C7:0F:5E:DA:C6:39:80:2F:13:B4:5F
Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial: 010D0C9F4328584D237A30702A7B0F8EB05705A0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/2cd42d13-89ca-3019-8d69-c71a6b961632.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 19651
IP address blocks: 2602:f9ec::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:30:70:2a:7b:0f:8e:b0:57:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=e85f6b08-07fd-4f1a-abac-7eef4af1ddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:49:e9:9b:5b:44:ff:11:d0:b2:58:4a:6e:
d4:eb:b3:b3:9e:c6:62:39:36:cc:08:2b:26:5c:40:
a6:7f:b5:d9:1f:a7:7d:4d:ac:be:5e:f3:d5:31:d2:
ae:3d:f6:82:bb:47:a6:33:53:a6:9d:e7:2c:cf:86:
b6:fb:cf:c0:b8:24:e9:a0:d6:96:e8:83:83:b4:61:
69:dd:eb:73:e0:71:0d:18:7b:8a:52:96:a4:7c:ff:
d7:34:a2:76:32:62:9f:99:71:6f:1b:e0:2e:f0:de:
70:8b:ef:87:6b:7e:9b:2d:88:30:bc:ef:72:6a:56:
aa:1a:fa:01:10:24:67:4a:f2:be:d5:7b:09:a3:63:
dd:60:09:13:01:bc:79:78:62:08:f8:7a:b8:d0:08:
5c:95:3f:91:06:6f:60:8f:25:70:a5:93:25:19:ab:
e6:ac:79:d2:81:88:8c:5e:86:1c:1a:8d:34:79:3c:
20:f7:88:f0:6a:a3:dd:87:8b:34:79:3a:13:1d:6a:
c3:55:4d:e1:4e:4e:3f:f2:69:3d:19:8d:59:98:a1:
6c:93:6c:ad:95:56:4f:6d:2f:c2:bc:ff:a9:f2:dd:
52:de:fb:e6:37:87:69:53:2f:9b:54:82:a1:cf:4b:
2c:84:12:c7:51:a5:77:79:15:d6:85:df:1e:a8:cc:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:01:99:47:E9:8E:9E:2B:C7:0F:5E:DA:C6:39:80:2F:13:B4:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/2cd42d13-89ca-3019-8d69-c71a6b961632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
X509v3 Authority Key Identifier:
keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ec::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b6:76:a5:ea:99:d9:92:34:65:c9:22:58:73:0d:7a:12:03:
9d:c2:06:a9:6f:6b:05:db:fa:7f:d7:66:86:03:a3:b1:d1:39:
fb:e5:d1:a3:3e:e3:33:6e:4b:9d:d1:3e:fc:69:50:09:16:ac:
fc:48:10:25:f6:b2:03:dd:02:a3:ba:61:e2:68:42:f6:7d:b0:
cd:b6:8e:14:37:58:91:91:9c:af:ca:f7:da:87:2a:8e:81:a4:
22:d4:41:1c:f5:93:95:32:ae:fd:ef:ff:0c:8f:d8:0e:88:80:
6f:8c:74:6c:8f:ab:8a:c8:45:85:d4:ce:e0:fd:5f:75:b3:bd:
60:d2:b7:7d:ac:c2:c1:52:b7:a1:0c:c4:48:d4:6d:82:7e:dc:
50:67:1f:7b:76:2e:6a:61:c6:9b:96:61:f1:12:32:5c:37:01:
0d:a2:e9:ad:9b:10:2b:b8:ae:1b:40:a1:21:f9:b1:11:24:9b:
28:3a:21:6d:47:1b:a9:ef:d5:4c:81:c5:a6:34:5e:84:92:35:
22:98:90:32:9c:1f:26:0e:4f:22:64:f5:18:8a:b4:c6:a6:55:
8a:7f:1e:12:93:b6:87:30:50:75:c3:57:86:70:2f:21:f4:fc:
a4:d1:c5:1f:7c:b9:07:33:15:bc:c2:d5:3d:8b:43:ad:37:f0:
b0:b3:17:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:06 2026 by rpki-client