
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa
File: 99370b71-bebd-3bd4-987b-494d0044a88a.roa (raw, json)
Hash identifier: 6VUw8jpHUAGgzTe9CNw6KO8aAm4vE20l8iqfWQ/1LjM=
Subject key identifier: 49:0D:CC:92:04:6B:8F:4C:6E:97:43:C8:F5:47:5A:9E:35:AA:70:9C
Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial: 010D0C9F4328584D44FA26414ADD0CDEAD60C400
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 140666
IP address blocks: 2602:fa80:3d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:26:41:4a:dd:0c:de:ad:60:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=2366a632-8cb3-48f9-a950-3460bd84db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:5e:b2:28:e7:0c:95:f0:98:31:24:33:c5:
8c:be:f4:71:f9:ad:bc:f9:7d:29:9a:2b:7f:ae:a9:
ed:66:71:de:ca:af:43:32:67:e9:f5:ba:5a:3d:ff:
f6:0f:32:1d:d9:aa:4a:52:1b:ee:52:09:60:78:9b:
85:4e:7b:5a:79:54:f9:5b:73:2f:1c:2f:27:c8:7b:
6e:9b:af:bb:f5:d1:4a:e8:92:52:bb:d2:88:d0:44:
17:1c:4a:8d:ff:92:c9:44:1f:9c:82:04:a4:ff:9d:
85:5a:8f:64:29:e9:96:15:15:d4:7a:0c:b4:fc:5f:
eb:66:2b:f4:b8:a3:51:e2:a3:42:37:3c:b0:3d:5f:
91:ae:3a:59:dd:77:54:e1:1e:7c:25:d6:47:5f:24:
3a:7b:7c:d4:fd:39:cf:ac:ef:ff:71:04:73:84:95:
fc:d3:bf:7e:50:28:32:6b:89:13:4e:9f:48:e2:79:
4e:a5:81:b7:6a:58:0d:e3:97:c0:56:30:4a:5a:36:
9c:1b:97:01:80:68:d8:1f:a0:b4:24:88:c9:fc:b3:
b1:9a:df:1c:32:9d:dd:fc:87:cb:e7:55:12:30:18:
20:98:2a:8f:ed:08:9f:9f:43:a2:35:13:70:d1:b3:
c4:a6:3b:ef:bd:53:5a:ad:62:ac:d0:11:9a:a1:7c:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:CC:92:04:6B:8F:4C:6E:97:43:C8:F5:47:5A:9E:35:AA:70:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
X509v3 Authority Key Identifier:
keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa80:3d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8b:54:a7:25:e6:91:cc:b3:08:ad:c9:27:6d:1b:fb:79:6d:
ec:15:51:55:c8:66:68:89:d3:5e:8a:03:21:37:f8:0d:47:a1:
54:cd:3c:d2:bb:2e:f2:40:8a:9a:59:0b:f1:6f:3e:92:47:1d:
4f:bb:32:a4:88:30:e3:9f:45:12:24:fc:78:fa:3a:81:3d:5e:
70:36:ce:99:16:b1:d9:86:e1:f1:75:56:25:df:86:8c:60:22:
01:b0:fa:2e:90:54:12:0e:23:dc:93:cf:cf:e2:c9:33:14:64:
eb:65:9f:9a:d7:aa:9e:b5:49:ac:f1:b8:f0:35:71:bf:37:93:
82:af:8f:c4:dd:7d:b4:0a:08:db:78:bc:6e:f8:aa:4b:a5:bb:
78:eb:cf:5f:18:ac:c5:44:4d:22:d9:2c:7d:c7:2a:3c:b1:f3:
cf:f6:d4:80:f9:da:82:72:2c:54:5d:15:4a:86:59:ef:e8:d5:
d1:0c:de:dc:ca:e7:0d:f9:5f:59:5f:f9:50:22:55:92:6b:96:
14:38:ea:d3:99:72:85:25:e6:7c:1a:04:42:0c:f2:06:ce:85:
16:16:94:80:8e:05:9c:cb:0a:fa:d9:aa:d5:a6:25:d3:2c:8d:
77:1c:95:ec:7e:37:44:9b:83:0f:cc:54:05:8f:21:ff:1d:33:
7e:82:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:25 2026 by rpki-client