
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
File: 8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa (raw, json)
Hash identifier: v4pHbI9pEjg32LnIrVHhZoCjEauTQqeta9OPs2Z6c6Q=
Subject key identifier: 8D:6E:2C:09:29:31:B8:D2:9D:BC:26:20:01:11:06:6E:A4:4B:D4:A7
Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial: 010D0C9F4328584DAC456F3DF83070A8B7EE6840
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 21709
IP address blocks: 2606:6400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:6f:3d:f8:30:70:a8:b7:ee:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=011cbdfc-5e65-4c71-8013-32e5217044f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:de:cf:35:c4:88:79:c8:f1:2f:79:18:e5:
fd:12:83:68:cd:ac:6d:7b:72:1a:c6:b8:87:44:c1:
58:5f:d5:3c:8c:36:f9:87:33:d7:3d:e1:f3:76:2e:
46:68:04:19:d7:2f:6f:f8:31:2a:bf:72:be:7a:d0:
aa:5b:07:4e:6b:db:c1:b4:d1:82:c8:19:ef:b1:38:
de:2d:b7:a4:b3:07:9e:60:b1:ae:c1:e1:48:25:c7:
f9:4d:00:98:94:db:84:9f:72:6c:b1:46:36:b8:6c:
87:ad:52:56:f5:04:33:6a:26:76:2f:d8:e7:5c:e7:
b0:c7:2b:f8:8e:b0:73:01:91:d9:ac:b1:0b:72:aa:
cc:bd:7e:d5:65:e7:fd:ae:65:8f:3c:16:48:53:05:
68:8d:34:9b:59:28:20:3e:f3:3c:f6:01:9a:67:29:
3e:1d:d9:58:e4:c6:db:7d:4d:5e:d4:25:fd:37:6c:
90:60:8d:53:fa:25:4d:a4:b8:33:51:eb:8a:75:c3:
5f:ae:bc:f9:6e:e5:3a:ce:50:c0:80:d7:37:5b:44:
3a:e2:5d:11:e0:5c:18:8a:7e:b6:01:be:29:65:31:
75:59:78:0a:87:04:e9:7c:c2:3c:fe:12:47:32:b8:
03:52:98:dc:4d:ae:57:e2:78:c7:5a:57:a2:14:52:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:2C:09:29:31:B8:D2:9D:BC:26:20:01:11:06:6E:A4:4B:D4:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
X509v3 Authority Key Identifier:
keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:6400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f2:49:d5:41:b1:9b:9f:d5:00:a5:78:9f:7b:fc:51:33:8e:
b3:f9:e0:3f:11:1f:75:1a:a6:6e:37:c7:82:e6:8c:2a:44:94:
c5:bb:4e:d0:ee:35:69:3a:f7:90:65:35:08:3f:27:bc:2c:28:
09:90:60:70:5e:fc:89:d5:95:f4:dd:87:65:47:d4:9e:9d:77:
fc:5e:67:61:4f:da:63:bd:86:cb:ae:8a:e4:b8:d0:05:80:32:
d5:9a:c5:07:08:e3:7c:e9:91:9b:e5:89:2d:ba:74:cc:9e:35:
e1:46:e5:f6:d5:04:42:d6:24:04:06:f0:95:17:d3:a6:08:41:
28:91:1f:e5:60:ba:13:f1:04:b5:10:35:a6:cc:71:ba:96:1e:
53:15:65:0a:24:21:b3:b2:fc:19:53:b1:52:68:49:55:7f:66:
70:ee:ef:9e:3e:f4:76:ac:5a:c9:e2:9d:77:1b:ff:18:a7:41:
44:a3:b6:b1:a7:92:4c:33:cc:d8:89:96:91:a7:00:e7:7d:5d:
59:bd:94:36:82:c2:bc:88:6b:56:9d:9a:0d:f1:d8:bd:bc:45:
dc:2b:74:f3:a8:2b:86:6e:f9:24:0a:31:01:7c:c3:11:cb:7c:
18:fc:ea:fc:a6:6b:77:e1:7f:b8:06:7e:df:9b:e3:6b:f2:90:
c3:54:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:36 2026 by rpki-client