
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa
File: 24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa (raw, json)
Hash identifier: 3tCpKN3is0HshsIltB9Fat6Xvi3g1IXOJv6Po7mEEXQ=
Subject key identifier: EE:29:B7:A8:76:3C:5E:61:25:04:21:22:C0:80:DC:72:8D:71:55:F0
Certificate issuer: /CN=65443887-0807-4b1f-82f3-c04f3da375a8
Certificate serial: 010D0C9F4328584D9FB58E8155ADF7D94EF98580
Authority key identifier: 3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 402164
IP address blocks: 2620:5a:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:8e:81:55:ad:f7:d9:4e:f9:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65443887-0807-4b1f-82f3-c04f3da375a8
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=81abb96d-ba04-4ea5-bc39-c0bae98c6971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:0e:90:ae:72:cc:e1:f6:e7:89:2e:8b:0e:
da:25:11:96:f2:d8:6c:46:4f:8e:f9:fc:08:65:1b:
26:c0:6c:af:3e:bb:e3:63:eb:4f:76:6a:9e:d8:03:
3e:77:7c:53:a3:bd:b8:9b:85:43:be:cd:f5:37:14:
76:a4:74:27:5e:4b:69:5e:a3:a1:56:e7:b0:f0:16:
07:26:9c:69:b3:4a:0e:fb:1f:6b:59:8e:64:fd:7f:
b0:83:ce:a4:ee:2a:1a:11:c9:c2:3e:0d:f6:44:90:
c5:52:5f:7c:36:4d:da:86:1f:fd:af:dd:9d:5b:f5:
c6:b7:2f:5d:a6:17:d5:51:db:61:24:07:b8:5c:ce:
d6:11:0c:21:40:0c:3f:50:80:53:45:54:0a:c6:fa:
23:6d:2f:32:56:07:1f:2a:a9:31:c0:0f:e6:0f:d7:
68:59:fd:68:35:43:b2:dc:1d:fe:d4:93:b0:05:0d:
dc:44:02:29:ca:88:39:88:a2:67:41:d1:a2:ed:ea:
1b:60:cc:cf:79:53:5f:04:c8:ac:88:e5:65:d9:e3:
29:e0:36:0d:81:47:08:c5:de:e5:7b:f2:05:c7:90:
d0:b8:6f:b7:ac:b7:78:3d:54:0a:ec:7c:54:9a:09:
3a:8f:3f:33:69:7e:95:a7:6f:ac:be:3c:7d:5a:99:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:B7:A8:76:3C:5E:61:25:04:21:22:C0:80:DC:72:8D:71:55:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/24856481-7f15-38ce-8f25-bae6fa0b5e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.crl
X509v3 Authority Key Identifier:
keyid:3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:5a:d000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ec:b9:49:29:70:9d:ff:c0:3d:14:9b:d6:42:be:e0:3f:ad:
2b:a2:43:78:1c:02:61:ad:73:8b:3d:65:4d:f6:f6:4b:0d:6b:
bf:5e:5b:63:08:79:f7:97:ba:39:9c:23:9c:e7:47:ca:36:bd:
4d:11:39:ef:c2:1f:c2:63:5b:b7:ac:ef:b7:76:57:ca:4d:65:
60:e4:a2:d5:69:12:c7:df:18:ab:fd:a3:de:84:ad:fb:c2:8c:
20:8f:11:11:6d:12:29:6d:65:3b:a8:28:1b:7d:c3:53:26:f9:
b6:49:43:11:cf:fb:48:0b:f4:d0:e4:1a:6c:7c:27:95:4c:64:
b7:4d:b1:0e:cc:93:9e:0c:80:34:a6:16:df:47:e0:1c:38:a3:
02:12:54:8e:da:74:1f:0c:67:23:8e:23:7c:9a:f2:54:72:36:
90:68:27:f0:fc:56:e3:56:36:32:fd:ec:18:72:08:7a:2b:82:
92:1d:ce:66:fc:64:cb:3e:56:ab:46:bc:70:0e:1b:27:01:45:
11:f9:d8:91:a2:ac:f0:8b:ba:11:83:78:96:5f:d4:c7:7b:67:
9e:60:68:7e:b9:d4:4f:06:68:0e:0f:e7:85:66:a3:2f:38:50:
42:65:de:c4:20:92:0d:a8:e4:70:39:e8:eb:24:9a:3f:17:75:
c4:7e:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:03 2026 by rpki-client