
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/432912af-2f21-337f-a483-b9d0aab74c03.roa
File: 432912af-2f21-337f-a483-b9d0aab74c03.roa (raw, json)
Hash identifier: zKXeNs1NwklQ8nmu6o3Mc8vBcTH+kv7mkAeFRUWLRiM=
Subject key identifier: 9E:40:F5:F0:2A:08:EF:65:28:DF:EB:94:DB:7E:8D:B9:E2:32:C7:B7
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CAFE7DD546A1EE406CBD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/432912af-2f21-337f-a483-b9d0aab74c03.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 33588
IP address blocks: 2600:6c34:5c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:fe:7d:d5:46:a1:ee:40:6c:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=a6aa13bd-7039-49ac-b075-73709a122c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:58:b5:f3:60:ef:bb:c9:6a:ff:f3:e2:87:
9b:b6:cf:63:ef:ad:a8:b6:02:f0:37:37:39:ad:1b:
f8:0c:50:0e:28:fd:b4:db:fb:cd:b2:11:40:d3:2e:
a9:c8:ae:45:66:78:5d:c3:f3:02:04:d3:3d:5a:5a:
90:44:03:93:41:a5:e1:4e:f5:2c:82:c5:18:46:47:
6f:f0:c0:db:b8:f2:fa:47:c8:27:15:56:e8:e3:6e:
81:50:1d:f5:50:58:d1:71:10:6c:d4:ef:26:9c:b0:
8e:5a:35:b7:7e:35:3e:64:1c:f3:a7:e6:14:2a:96:
83:79:60:c5:d8:d4:2d:da:a9:f6:fb:b1:70:85:68:
0d:02:cb:14:17:d8:31:d1:a9:78:9c:17:15:6a:23:
80:fb:dd:cf:21:fa:84:de:2a:41:59:0c:31:75:08:
99:9c:f0:1c:1d:da:b0:2a:05:2c:8c:5e:3f:8c:2e:
09:4f:72:24:d5:b6:cb:6c:84:44:19:ad:12:d6:af:
1c:26:8a:9a:20:17:bb:f4:64:e8:6d:08:97:10:44:
39:c2:87:8e:2f:7e:17:1b:c8:d3:37:75:30:cf:d6:
de:f0:8f:72:9e:6d:b0:9e:1b:77:90:0b:a1:bc:2b:
05:ba:cd:81:7a:f9:7f:e5:62:0a:f1:8b:31:66:70:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:F5:F0:2A:08:EF:65:28:DF:EB:94:DB:7E:8D:B9:E2:32:C7:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/432912af-2f21-337f-a483-b9d0aab74c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:6c34:5c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:e7:e9:45:b1:96:15:92:a8:a6:5e:50:44:2e:d7:92:16:5d:
bf:81:92:51:18:08:1d:62:ab:48:3f:87:10:2a:0b:71:a0:da:
f9:e9:50:ff:bc:ce:db:6b:db:40:e3:7d:f6:e1:ab:ea:28:1b:
1e:b7:19:11:6d:75:71:59:26:44:78:73:35:3c:81:29:13:b7:
05:30:5c:9a:86:a0:96:22:53:c3:dd:c7:12:fb:a7:70:61:e7:
99:ea:fd:97:90:d4:8b:9d:9d:00:0c:9d:0b:21:8e:7f:3f:12:
da:fb:7a:77:38:c6:4a:13:43:3d:28:e8:4d:70:73:09:19:9b:
c3:90:b0:c5:ad:07:d6:73:b0:a8:2d:64:82:24:1e:57:e7:f4:
ce:d4:73:f5:50:0c:08:90:73:a5:25:4f:6b:b0:00:47:6c:4e:
72:84:1f:67:e6:c2:8a:bc:05:c6:47:ea:d4:2d:32:2d:71:4d:
28:b5:3e:bd:87:c0:fa:27:11:1f:3d:77:d6:a4:4d:db:07:49:
89:02:4f:3c:da:45:7f:53:7b:28:bb:87:19:a4:e2:78:ae:00:
1a:c4:e1:96:00:ea:97:8a:9f:f9:7b:b3:f4:1c:d9:85:7c:66:
75:44:07:67:df:ee:b7:bb:09:32:55:ba:af:1a:ee:f4:e3:62:
bd:5f:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:04 2026 by rpki-client