
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa
File: e604844e-6771-382e-9607-2068e2fe75d0.roa (raw, json)
Hash identifier: 9fsgFQzXus+U6j8tXKINOWymEpw7zIydYujoqYiCtHg=
Subject key identifier: D4:DF:43:85:0B:DC:ED:5A:67:3E:EF:4C:DA:8F:CA:4B:2C:DD:FB:28
Certificate issuer: /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial: 010D0C9F4328584D44FA3B95546E1EE1041C4F00
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 206885
IP address blocks: 2620:13e:5000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:3b:95:54:6e:1e:e1:04:1c:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=967ccfb0-677f-4ec2-99d2-0b03562cdad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:fa:52:09:a3:ee:60:08:c6:dc:a5:af:e8:
61:87:32:fd:21:12:7e:9b:af:3c:6e:c0:74:bc:61:
2b:bd:d9:13:eb:c7:3a:93:94:24:e8:22:38:83:47:
71:dc:cf:d7:01:46:e2:19:2d:2d:6b:ef:e3:39:f8:
41:48:3d:4b:da:89:25:a6:e8:99:c3:b4:5a:9a:d7:
25:70:9c:e4:43:06:49:e2:13:08:f0:a8:7c:dc:ab:
36:4e:76:21:52:ee:fc:a3:2b:2a:a6:9a:41:26:ba:
8c:93:1d:91:6f:d7:3e:e7:ba:87:05:35:22:e7:b8:
04:f3:f0:39:3a:b4:e8:f4:b9:a6:37:39:b0:02:18:
eb:1c:01:c3:7c:26:56:65:10:b3:85:a0:33:02:91:
dc:9e:6e:30:24:a8:89:19:75:1e:56:12:48:9c:8e:
b8:ae:8a:cc:33:6f:cd:76:68:74:fd:a0:1b:3c:7e:
e8:57:fc:dc:92:83:69:2a:bd:ab:3e:25:a1:58:9c:
ad:09:ef:c9:d2:d4:17:da:e2:01:79:81:9a:f6:72:
d2:dc:ae:70:1f:c4:74:38:71:43:cb:4d:db:f8:c6:
3b:ba:3d:d8:4e:70:73:08:5b:a8:79:b4:c1:82:13:
c9:0d:05:d6:b5:0a:10:35:ae:f9:bd:1f:35:96:03:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:43:85:0B:DC:ED:5A:67:3E:EF:4C:DA:8F:CA:4B:2C:DD:FB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
X509v3 Authority Key Identifier:
keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:13e:5000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0d:c1:8f:b6:18:37:e7:b5:2a:f5:a4:86:b7:40:cd:6d:7a:
ca:e3:46:02:0c:3d:dd:ab:1e:a3:21:f6:0b:0f:2a:01:3f:80:
09:da:de:7d:3e:d3:de:4e:69:b2:fc:c2:36:1f:76:0e:1c:77:
02:e2:d5:5c:35:dc:f8:66:33:11:71:ab:92:42:9c:b7:46:f8:
4c:d4:2d:1f:bf:1b:d2:d0:9c:01:a3:ff:1c:c8:e3:77:04:12:
ed:f4:af:09:a9:6b:ad:c9:a7:83:d9:c6:39:02:84:20:29:68:
06:91:90:da:64:00:aa:40:63:ff:13:19:a2:9e:85:f7:4e:cf:
5d:cc:7e:f4:d1:bd:ed:c8:eb:00:22:b8:bc:94:2a:d9:b5:8c:
8a:f0:67:79:65:b2:ba:7a:c5:fa:10:08:21:6b:da:7b:b5:3a:
3d:28:7b:7f:82:25:6f:88:42:c1:42:94:f2:a3:1d:5a:05:1c:
38:76:59:d3:ae:33:67:37:e8:9a:c4:a5:d4:25:81:15:5f:ab:
33:1b:19:c1:ba:26:f8:7d:8d:28:01:5e:60:17:72:f1:74:11:
d8:4e:e2:4f:3b:67:c0:25:13:ce:de:90:7e:2f:1f:c4:89:50:
16:d5:3a:33:48:57:c0:be:8e:67:b0:73:77:55:93:31:d7:fd:
18:11:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:05 2026 by rpki-client