
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
File: b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa (raw, json)
Hash identifier: A6ZDryNwodhmjF/6BS/qHjrv7l3D5Rti93Rd+5m8QM0=
Subject key identifier: 23:74:62:81:14:20:38:EF:9A:D3:9F:BF:B4:9B:CD:E3:62:21:91:18
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584D4A8F8275A1FE5D6F339D58C0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 401659
IP address blocks: 2602:f5c1:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:82:75:a1:fe:5d:6f:33:9d:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=36c664dd-8821-4080-be51-6c318f93b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:a8:f3:4c:f0:fa:9b:92:70:a7:1d:b5:8e:
e5:c4:59:23:0d:78:fa:dd:b5:d6:d3:48:c2:10:74:
18:78:b5:52:e2:45:d2:c3:e7:ce:6b:9e:84:12:94:
3d:9c:c7:d6:15:41:94:33:aa:53:9b:ba:0d:f5:bc:
68:da:46:c6:be:bc:c7:56:f7:db:2d:ff:c0:31:96:
52:f0:21:04:24:3a:9f:e5:4b:7e:52:d7:a4:d0:a6:
6b:58:63:31:9b:dc:22:13:5c:ff:c5:d8:c7:d5:bc:
c9:11:92:f1:77:10:e2:d4:f6:54:71:76:98:4c:c1:
56:62:17:35:f4:a1:14:8d:1f:f9:49:5b:4f:c8:7c:
8a:c9:04:aa:a0:b2:45:be:35:f4:86:27:36:29:e3:
a5:11:57:58:75:5e:f5:0a:fa:28:69:66:99:cd:62:
a3:44:7a:9a:00:69:54:56:f8:68:0d:4e:2c:11:c1:
9e:6a:28:59:08:f4:c2:fa:38:55:c7:04:66:18:4c:
11:cc:fc:3c:58:31:04:20:ac:f9:28:f2:97:f0:b7:
e6:18:5a:13:71:cd:ee:27:cb:ed:ba:67:10:87:58:
0e:bf:92:b0:4a:e6:82:b6:30:b1:a3:e0:e8:42:fc:
0d:a8:65:e4:38:54:70:dd:d4:60:50:8c:b6:c5:5b:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:62:81:14:20:38:EF:9A:D3:9F:BF:B4:9B:CD:E3:62:21:91:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f5c1:c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:70:00:c0:45:6c:6c:e6:fd:af:8f:56:29:2b:e4:bf:01:1b:
4a:1f:66:43:a8:2a:cf:92:ad:d1:8b:8d:1f:e0:4b:d9:3b:dc:
77:07:73:ac:85:43:30:d9:2c:05:99:5f:21:81:1e:41:07:d8:
76:1b:e7:bf:23:2a:01:c6:86:53:7d:ef:0f:8b:fd:67:b5:97:
d7:f2:2f:d7:47:e9:d3:45:9c:43:32:58:9a:15:a0:a4:36:a9:
81:69:9d:75:5e:b0:67:46:72:f1:f6:57:8a:8d:04:37:04:26:
c1:45:6e:c3:82:97:87:a9:56:25:d9:66:57:b9:01:95:68:86:
12:5b:e3:8c:0d:84:76:25:cb:91:e9:ec:5c:57:2c:e9:d1:eb:
1a:f3:b5:f1:8a:ea:98:c4:eb:0c:d2:fe:d1:c3:94:af:90:4b:
ba:5e:a7:dd:b8:cc:0d:b4:7b:fa:24:0d:37:d1:97:41:95:78:
f0:59:7f:bb:25:ea:00:e8:7c:e0:bb:d1:bc:73:68:0d:43:6f:
1b:c2:ff:8c:81:16:3f:b7:1f:89:b4:7f:d5:7b:48:4f:a8:5e:
e1:8a:09:0b:07:14:10:c0:22:27:19:ec:33:d7:a2:cd:52:6f:
26:31:04:b8:14:36:2d:19:57:23:94:e2:62:cb:e6:57:23:96:
c3:65:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:46 2026 by rpki-client