
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa
File: df571e00-0021-324a-8fb9-5cf4efc237d7.roa (raw, json)
Hash identifier: R4KKzz5jK5vtsOAi0K2LIXzp7mfhRXY+483HWK/TXZ4=
Subject key identifier: 8C:B6:6F:F7:CB:8D:DB:18:C6:3D:74:AD:D9:2E:92:F0:52:AF:2B:7D
Certificate issuer: /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial: 010D0C9F4328584DB340377D89284BB1D3AA1B80
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa
Signing time: Sat 02 May 2026 13:00:31 +0000
ROA not before: Sat 02 May 2026 13:00:31 +0000
ROA not after: Fri 31 Jul 2026 13:00:31 +0000
asID: 14618
IP address blocks: 2602:f702:222::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b3:40:37:7d:89:28:4b:b1:d3:aa:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Validity
Not Before: May 2 13:00:31 2026 GMT
Not After : Jul 31 13:00:31 2026 GMT
Subject: CN=07602996-407a-46db-a35c-c91f775925f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:b3:01:cb:78:67:1f:99:44:8a:3a:58:28:
43:8d:0c:35:1c:dd:3c:dd:2f:cc:38:3f:ca:5e:c4:
b1:82:b2:8c:50:f7:04:b9:01:b2:10:5f:6c:1c:e8:
f0:7b:03:dc:08:ca:64:37:b0:68:a7:b9:4d:db:9e:
72:ec:40:ec:bf:06:5e:4a:14:61:45:63:f8:7a:3f:
90:64:b1:98:78:d0:5e:b6:f3:d0:0a:1e:6c:c6:39:
fb:95:c5:06:03:21:42:ba:f8:26:63:2b:f8:38:07:
82:a6:63:bd:74:07:47:70:22:7a:c4:bf:fe:a1:da:
38:ff:16:e4:a5:a9:6a:b3:fd:cc:e1:12:ae:ac:57:
42:95:b6:14:38:ef:ac:1a:de:73:f5:63:1e:53:89:
f0:96:b2:c2:31:4f:e0:ae:8c:35:a7:b2:9e:53:26:
00:16:55:17:5e:e6:7c:76:5f:44:76:5c:58:d2:64:
f5:93:d0:3d:fa:d6:dd:bd:6a:9d:32:b4:16:e4:7e:
f9:a4:e7:da:e4:70:f9:63:db:49:d8:e3:2b:6c:0d:
87:ec:4c:5d:d0:d3:1e:4c:fb:ee:d5:fd:a2:90:5c:
4d:dd:56:39:bd:71:55:f8:cb:73:00:1f:e5:07:42:
b1:66:46:75:d6:2c:4b:df:98:65:f0:b9:1f:2d:c2:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:6F:F7:CB:8D:DB:18:C6:3D:74:AD:D9:2E:92:F0:52:AF:2B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
X509v3 Authority Key Identifier:
keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f702:222::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:52:7c:e2:91:6f:88:72:f3:89:6d:f1:86:5b:c0:07:93:02:
54:3d:92:d0:3d:2c:5b:b0:62:cb:6a:4b:9a:a1:ea:92:db:fe:
cc:ad:4d:4b:9e:95:d5:62:2e:11:19:fe:3f:03:ec:b6:e6:a3:
7a:07:b4:21:6d:b8:8f:28:e4:38:7d:9a:67:2a:98:bb:79:b0:
15:d9:4b:94:0e:6e:1a:03:fd:13:f4:c9:c9:70:06:25:56:94:
01:35:a5:2e:5a:ca:d9:b3:03:f8:de:49:f6:bd:65:f7:a2:d8:
15:22:2c:97:bd:5f:6f:fc:66:f4:4b:52:07:3e:ef:9d:54:fa:
fa:ff:9d:0a:89:e8:ad:e6:5f:ce:81:80:88:be:8d:a8:47:fb:
67:ea:a1:65:f9:cd:6d:8d:c3:0f:55:76:a0:46:09:69:af:f3:
1b:a4:c2:01:ab:61:ac:3c:4e:a5:32:db:d1:8d:d4:0d:23:b4:
ba:3b:70:19:a4:62:f6:4f:89:7c:73:f0:a7:38:f8:00:0d:be:
5c:fe:62:b8:05:2f:55:74:ce:70:85:d3:be:df:81:ef:bf:9e:
4e:74:1f:8b:34:5b:ac:5d:ce:53:e0:b2:e5:fc:b3:67:c9:0c:
82:4c:d7:39:5d:77:1c:a1:ec:f4:e4:b4:76:60:d2:33:af:d4:
01:c8:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:44 2026 by rpki-client