
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
File: 5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa (raw, json)
Hash identifier: cNl9k8qcADVDm3FOFo4H7madFjSWiZOVWurkA8c41s4=
Subject key identifier: 2E:58:EE:CA:4C:87:38:4C:45:0A:31:ED:19:2C:7D:E6:F3:33:84:E6
Certificate issuer: /CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
Certificate serial: 010D0C9F4328584D300A3658DBCD80ACEF9D4C00
Authority key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 32772
IP address blocks: 2604:16e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:36:58:db:cd:80:ac:ef:9d:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=c5deccb0-e574-4e92-bae8-fcfe647939ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:48:4c:6d:2f:b1:18:eb:4f:22:e0:c1:82:
d7:3d:e4:43:6f:2f:28:4f:4e:10:75:d5:8a:7b:e1:
43:68:ac:be:84:31:e1:11:4c:54:56:3d:ad:04:ac:
93:15:cc:98:43:7c:cc:9a:6e:fc:32:98:66:7d:e8:
c2:f2:ea:22:4c:45:80:10:c2:39:f1:db:90:e8:16:
e1:41:be:eb:2c:9c:b8:a9:27:b4:51:f1:a8:c1:da:
6a:51:c6:74:2e:17:13:d7:7b:ff:59:28:9c:2c:9f:
0b:9b:21:54:e8:d8:76:1d:9e:3b:c4:a7:d5:5a:f3:
00:ce:72:52:bc:07:d0:41:6b:59:61:6f:b4:0f:51:
a0:5c:6a:3a:79:c8:75:95:6e:9a:63:8d:19:22:4d:
7a:85:bb:6a:ac:74:74:b7:e2:6b:6f:95:68:69:1a:
1c:31:ac:12:c4:4d:de:bf:a1:32:05:82:1d:e3:65:
bd:1c:99:4c:0b:6a:eb:c1:c5:35:91:c9:1e:6f:ac:
ab:48:b8:8a:22:e3:a8:f4:2d:6a:6d:5f:47:0b:3b:
74:25:2a:ea:30:56:ed:7d:64:98:d9:4a:87:7b:86:
eb:94:75:46:81:8b:a1:65:4c:ef:7b:d9:cd:cd:99:
fd:86:17:57:ee:dc:92:de:3b:79:39:c3:36:af:62:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:EE:CA:4C:87:38:4C:45:0A:31:ED:19:2C:7D:E6:F3:33:84:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl
X509v3 Authority Key Identifier:
keyid:16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:16e0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:7c:1b:b9:ae:2d:6b:73:4c:75:30:46:4c:1b:8f:b6:bd:67:
d7:14:27:c7:cd:7a:81:92:9e:c4:15:e3:cb:a0:28:11:a8:83:
38:88:cc:22:3c:48:64:f4:17:c7:cc:f8:5a:b8:f3:d9:62:4f:
62:a2:35:1d:cf:68:98:0c:c2:c1:ee:76:0a:06:e8:fa:15:06:
25:bb:f2:ce:43:7a:94:80:88:bb:dc:c8:22:77:95:09:7b:ae:
02:95:14:54:7f:44:ea:e0:8a:d6:c1:5d:7b:2e:e1:db:cc:d8:
ae:96:b9:13:3a:9a:36:18:cf:f5:bb:6f:75:95:83:5f:3b:20:
aa:d2:7d:b0:17:36:7a:1c:6e:e7:64:2a:26:57:43:81:86:0c:
c5:7d:db:0d:36:a0:49:4e:aa:4b:8f:d0:b5:96:82:38:6c:25:
53:41:1f:01:55:64:6e:f7:0a:8c:2a:d2:32:5d:fd:52:74:23:
9b:7c:a4:29:00:78:08:87:05:e8:3b:c9:10:b8:ed:e7:35:64:
17:90:01:d7:a8:20:58:af:a1:99:e1:ef:a0:0b:24:36:45:6c:
f1:c8:7a:bb:39:48:6f:42:87:26:28:1b:b5:a6:e7:43:40:9f:
d8:ac:c8:e1:40:a3:07:c2:a3:1c:68:7e:72:ea:64:65:04:90:
86:bf:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:35 2026 by rpki-client