
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
File: ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa (raw, json)
Hash identifier: QYfl5MWF9IBIesenJwMB8Y5oIGoqqLDiVKO4QKRdKHo=
Subject key identifier: C9:B0:92:F9:CC:72:F7:C3:B8:D0:6F:A2:05:AF:97:7E:5B:C3:72:51
Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial: 010D0C9F4328584D27AA2F30F68FD301DBC33900
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 16509
IP address blocks: 2607:6bc0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:2f:30:f6:8f:d3:01:db:c3:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=233ed55f-2746-404e-9388-cdb4f24b23da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:7e:e8:a6:f1:ab:6a:36:fc:65:84:76:91:
04:26:4c:c1:1b:79:4d:7c:2b:20:68:7e:58:33:8b:
7c:15:b3:1c:e5:79:98:68:14:be:2e:4d:99:24:7b:
f1:84:eb:98:d8:5c:08:ec:6c:a2:4e:80:bf:d4:7b:
01:50:25:fc:16:7c:33:4f:cf:17:81:5d:15:42:8f:
ff:d4:94:03:70:16:c4:f5:1f:7e:95:d0:32:03:5a:
0b:15:7d:29:eb:a1:71:6f:b5:99:b8:ae:20:c8:39:
7a:5e:f8:79:ce:b6:3b:bb:04:ae:35:6c:b5:6b:38:
a6:c0:c9:f6:0d:e8:23:29:f4:cc:d2:9b:68:50:25:
83:eb:d9:4b:9e:02:d0:d8:9c:87:3e:ac:9f:e8:15:
18:95:45:9b:4c:4c:e1:5b:be:8d:7c:c7:62:d7:6f:
cc:ec:36:85:2d:77:dc:8a:a7:d6:58:07:36:5b:51:
1a:32:e9:7b:5d:38:3e:d3:57:c2:74:f1:e0:3a:2f:
c6:d2:cf:08:66:e7:99:b8:1f:e4:32:1c:4e:93:1c:
97:e5:ae:28:e1:68:dd:d2:2d:23:5e:29:67:03:93:
6e:3a:7e:5a:8a:51:10:d1:b6:9a:e2:45:a4:6f:4b:
f9:fd:44:e1:29:cc:85:d2:7d:1f:0b:d8:81:f6:37:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:92:F9:CC:72:F7:C3:B8:D0:6F:A2:05:AF:97:7E:5B:C3:72:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
X509v3 Authority Key Identifier:
keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:6bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:1f:7b:ac:8c:fd:bc:c3:1c:75:d3:69:c7:a0:54:5b:f0:0c:
dc:dd:df:2a:93:90:f2:74:39:91:80:72:0d:29:1b:bb:36:2f:
50:6b:b7:43:68:2c:8d:b4:8f:aa:e0:3f:f6:d0:38:a8:13:b6:
ec:51:23:0c:2e:e8:0b:13:2d:10:7f:4e:0c:9a:18:16:95:b3:
06:cf:7d:0b:13:d3:5b:4e:96:06:a3:aa:b2:9b:e0:f4:c3:59:
2a:19:7f:5a:7e:c0:a1:aa:1f:57:01:47:34:79:6a:f0:d8:3c:
f1:16:40:06:b3:d7:06:b7:a5:fb:10:9c:08:fd:fe:38:53:3c:
a6:53:f7:70:76:70:dd:1e:15:10:15:96:8e:a8:c9:33:06:aa:
d4:40:7e:b5:46:a7:be:f9:45:be:9a:1c:0f:c7:4a:67:aa:80:
28:37:76:9c:40:b2:ea:74:d3:e8:a1:df:73:75:86:c2:94:e8:
98:d7:fb:4b:5e:65:96:c8:45:bc:d6:c7:e2:1e:5f:9c:a9:8b:
63:b7:2e:a6:28:1a:29:a8:2a:b7:a2:43:1a:0b:9c:8d:24:e6:
b6:c2:de:a8:e3:1c:eb:ba:b7:cb:3d:40:d9:e1:a7:eb:bb:c0:
84:c3:1f:ef:9b:30:40:c6:96:77:20:be:c7:3e:0d:35:f7:25:
1d:cd:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:29 2026 by rpki-client