
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
File: b5d1b190-f53f-3f48-af49-06cea36826aa.roa (raw, json)
Hash identifier: 4Ksw6dojUbAVH60rc1/k/WLXWtmvHE9knsKqs2Qql1M=
Subject key identifier: 5B:4B:13:2F:8A:33:13:B8:F1:5A:B8:36:A5:71:C4:1E:B8:A2:BA:90
Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial: 010D0C9F4328584D1F7941C13CC0B08A088D8480
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
Signing time: Tue 10 Mar 2026 14:35:57 +0000
ROA not before: Tue 10 Mar 2026 14:35:57 +0000
ROA not after: Mon 08 Jun 2026 14:35:57 +0000
asID: 401671
IP address blocks: 2604:c20:56::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:79:41:c1:3c:c0:b0:8a:08:8d:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
Validity
Not Before: Mar 10 14:35:57 2026 GMT
Not After : Jun 8 14:35:57 2026 GMT
Subject: CN=1d47caaa-1bec-4348-9bfc-fbb1bc935d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:d3:65:88:fa:cf:15:ce:6f:fe:bb:77:0a:
47:4b:ad:4b:c7:96:66:f0:ba:b5:99:1a:75:00:b0:
8b:ed:09:10:58:72:7d:f9:7a:76:32:98:d8:ce:a3:
21:43:3f:89:db:bf:a9:31:77:1f:eb:47:9e:ed:2e:
28:b4:c3:c1:cd:de:82:c0:b8:4a:b9:45:da:9f:46:
32:e3:cf:8b:91:f5:e9:ae:a2:35:ec:2e:17:67:bb:
1c:3e:af:7a:64:03:ea:69:14:ec:fb:23:65:13:18:
4f:cb:a8:d7:cc:c4:d4:22:57:66:3a:7a:69:44:d9:
2f:6f:5c:c3:09:2f:76:d7:7d:7f:5f:98:c1:49:73:
5c:53:b2:4f:47:d4:58:0b:68:bf:d1:18:cf:ae:a0:
ba:1c:57:34:22:e1:36:7d:43:48:ec:1e:62:3c:8b:
0c:c0:38:86:17:7e:ed:58:f7:60:95:ed:23:c8:62:
e1:38:60:51:d6:b0:42:9d:73:da:60:3b:28:93:a3:
9f:c3:6d:62:3a:22:6c:1e:15:d5:bb:f5:2c:ee:5c:
cf:76:03:f9:88:ec:2d:4b:cc:50:39:ab:eb:58:b8:
ff:61:3e:02:ab:50:fb:71:35:42:f2:53:5e:51:41:
3b:23:99:66:ea:c3:4c:7b:92:dd:5e:f4:b3:52:e4:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:13:2F:8A:33:13:B8:F1:5A:B8:36:A5:71:C4:1E:B8:A2:BA:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
X509v3 Authority Key Identifier:
keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c20:56::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b5:97:9a:f2:bb:58:91:65:8d:43:18:e1:29:fe:e5:6c:c4:
75:ac:c2:3e:b8:cf:2a:15:53:3a:95:d0:08:fe:b9:24:e2:18:
d6:92:9e:3b:cf:a3:2a:8f:d4:66:66:13:bf:0c:6f:f2:3e:c8:
96:32:83:a8:cf:b0:cc:b2:92:5a:8e:ad:24:b6:66:9a:1e:df:
19:1a:bc:12:3c:60:5d:4d:ca:b2:31:38:af:ed:dc:19:dd:dd:
10:8a:7f:75:f7:18:41:15:ab:07:fd:e9:61:6a:31:ac:f1:62:
0e:52:49:c1:15:85:52:ba:b7:86:f3:16:9c:f2:78:1b:4f:3e:
2a:b0:b6:bf:b9:f2:62:59:1d:a4:c5:4f:91:1c:a9:8e:40:a0:
8d:e2:f9:65:d7:f5:c8:15:e0:37:4b:c9:be:3f:06:cd:ce:91:
37:ae:08:fe:1b:75:ab:67:ff:f4:73:ad:a5:4d:56:6d:b1:6e:
b1:7b:e5:18:12:89:40:03:a4:66:cf:c1:08:3c:d1:c9:34:b2:
ac:ca:42:c1:98:95:5b:a6:a1:97:db:cb:9d:c3:9e:42:61:c2:
9a:f9:fa:58:c5:1a:7f:fe:33:aa:97:21:bf:55:ef:c6:00:ef:
b4:1d:03:8e:2f:0a:58:29:17:6c:34:74:70:45:8c:27:48:04:
82:52:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:07:21 2026 by rpki-client