
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa
File: 404125c1-db53-3460-abc1-3e2005096ff7.roa (raw, json)
Hash identifier: m81OdfUSfI5CiO0XOgL0Mj475gKwvDXSRlBrAhvQQ30=
Subject key identifier: DE:83:07:7F:03:D7:29:29:8E:F1:AE:46:B5:74:FA:09:03:B7:33:85
Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial: 010D0C9F4328584D44FA71D3C79EB3A96262CC40
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 16509
IP address blocks: 2620:117:5200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:71:d3:c7:9e:b3:a9:62:62:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=6043c852-267f-4a0b-b10e-f2fa88c055aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:c2:23:14:46:e8:e7:7f:30:bd:f3:b4:a2:
2e:2b:03:2b:3e:b6:0e:4f:33:aa:93:b3:eb:c0:6e:
0f:77:13:62:2c:fd:d2:89:ea:85:86:97:b3:67:36:
25:f4:03:dc:08:5a:8b:47:a5:4e:ad:85:de:58:a1:
a0:20:04:a7:45:a8:12:ea:4e:49:44:99:13:1c:5d:
06:d0:94:59:8f:44:90:ad:9a:2b:5a:00:09:12:a3:
74:f6:13:7e:0d:ad:d7:ba:fd:62:1f:f4:d9:3e:8a:
a9:31:5e:a7:26:78:52:6e:16:e2:10:0c:59:f6:1a:
23:52:66:1f:db:68:fb:12:ed:85:f8:1f:5c:57:6a:
04:df:97:b3:73:af:e0:9a:e4:0b:c6:9b:6d:6d:6d:
3c:2f:22:b5:1e:06:86:22:c9:6a:29:dc:6f:0e:c0:
40:9c:3f:58:89:0a:e3:98:37:70:0b:b1:03:9b:ec:
5a:04:3e:87:49:b7:63:47:3f:9b:00:9e:62:29:bb:
52:9a:b1:1b:51:7d:f6:4e:18:02:42:f3:6f:d8:14:
01:1c:66:88:e9:d6:85:44:a5:20:7b:0b:c4:3d:04:
97:69:e9:80:46:b9:ee:d7:26:0a:25:ee:96:0d:3d:
33:6a:11:a7:ec:4c:3c:70:0a:fa:6c:d1:ac:27:8c:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:07:7F:03:D7:29:29:8E:F1:AE:46:B5:74:FA:09:03:B7:33:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
X509v3 Authority Key Identifier:
keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:117:5200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:3f:92:b8:28:d1:e3:bd:ce:43:a9:32:0a:ff:d9:02:82:9d:
96:f5:a2:c2:c8:51:3b:3c:bf:5a:0f:a3:ed:54:37:85:0a:27:
79:6a:62:aa:fa:df:46:b6:20:2d:c9:51:13:54:89:f0:73:33:
33:48:5f:b3:2d:ad:f0:98:e4:e7:a0:b0:2c:76:68:ec:91:c3:
cb:f4:93:03:89:4f:44:fe:d8:29:d1:24:fe:62:89:42:43:39:
93:06:c9:af:0d:30:c0:ef:7a:94:e6:02:a7:ad:fa:81:36:ff:
6d:de:fe:4a:0b:91:f9:40:c7:db:f9:07:7b:79:5e:bd:43:68:
df:4a:7a:6f:aa:06:2b:30:9e:a8:f7:94:e9:42:e6:00:47:3a:
41:e5:4d:db:03:ea:b1:89:8c:23:d7:d4:bd:3c:91:83:6f:a7:
91:49:96:5e:97:fa:36:49:31:b3:9c:96:d5:1f:47:e5:47:61:
4d:93:3c:ce:53:8e:b5:a9:68:5e:b7:5c:09:e2:cd:e2:9b:f5:
e8:3c:7b:36:9f:ae:dc:6e:4d:94:c3:ae:ec:90:af:b2:d0:84:
5a:40:13:2d:ce:a7:39:43:b2:03:35:8f:38:14:4c:67:06:46:
5b:a4:c5:28:28:c9:57:2c:d4:76:9a:3b:cf:25:eb:7a:b6:ff:
af:bb:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:36 2026 by rpki-client