
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
File: 605c5576-b627-374c-935c-c768b229c9e4.roa (raw, json)
Hash identifier: Ik0mQBB/XhstlCGqR8o5qKgZgrhI0yXVCOl2e0XdIgU=
Subject key identifier: 1E:66:96:C6:58:AB:0F:EC:3B:F3:94:5F:64:29:9B:29:65:BC:8C:BB
Certificate issuer: /CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
Certificate serial: 010D0C9F4328584D905A9652967DEC5D25DE8CA0
Authority key identifier: 88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 12016
IP address blocks: 2620:db:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:96:52:96:7d:ec:5d:25:de:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=1886ec8c-c902-4bac-9f35-7b01bba225e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:0b:dd:68:06:a0:3f:4f:a7:44:e3:c0:fd:
a3:e6:1c:13:dd:c7:5f:3c:b7:ff:f2:de:46:d1:75:
50:5c:ad:e5:e2:c9:20:0e:fe:a9:1d:b1:32:10:a5:
3c:b5:fb:5e:49:ef:59:3f:df:10:97:f5:fe:33:15:
7a:ac:12:49:93:80:19:fe:62:50:f6:04:36:c6:41:
db:76:a0:fc:9b:4b:73:d3:77:ed:a6:a5:a5:40:b6:
a7:85:be:47:c2:f5:d2:c3:41:63:f3:af:16:35:60:
3c:26:71:d8:88:c1:e3:c5:90:77:dc:31:ce:c3:0a:
13:d8:4a:68:d8:cf:7e:4d:bf:1d:74:1f:c0:06:55:
fd:da:e9:bc:0e:b7:aa:8b:be:53:59:50:26:26:39:
e4:7d:21:03:d8:6e:cc:19:5b:6a:fe:be:78:4d:e0:
6d:22:c0:9d:f9:a0:39:49:54:81:12:b4:fe:ee:c1:
64:01:c3:4d:65:d2:5b:a3:e7:7e:05:f9:6d:4c:d8:
82:e6:a2:2e:f0:09:d4:3f:13:3d:cb:2a:b4:c7:2b:
e4:5b:12:19:81:f3:25:80:1a:3e:2f:46:7d:79:d7:
bc:44:71:5c:f4:9f:fb:b3:af:01:f9:73:90:0f:81:
20:82:02:5a:18:26:6f:21:54:a2:3a:68:01:17:e1:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:96:C6:58:AB:0F:EC:3B:F3:94:5F:64:29:9B:29:65:BC:8C:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl
X509v3 Authority Key Identifier:
keyid:88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:db:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6a:65:c9:47:af:e5:32:21:79:60:07:c3:e5:59:63:f3:37:
71:e5:68:42:ad:95:b0:d4:5a:4c:c2:1d:e2:aa:2c:52:05:13:
c7:29:7c:2e:31:6e:c7:c6:36:53:f7:c8:1a:74:86:d8:14:2b:
44:37:30:d6:92:d7:f7:fa:2c:f7:04:82:18:58:2e:66:3a:9b:
8e:ca:0e:77:24:43:42:a0:e1:d9:0a:50:05:dc:e8:81:09:a4:
20:69:62:8f:fa:78:f6:7a:1e:e4:bc:d1:1c:22:75:63:f2:e4:
0b:a8:89:f7:bf:04:4e:28:ea:e4:44:5b:8a:69:d6:c9:73:5d:
d9:f6:36:fa:28:e8:f1:a0:7f:46:79:54:a6:df:65:43:07:66:
07:58:ad:f9:85:c7:0b:4f:5f:1c:0c:b6:f7:4c:d8:91:b9:5a:
fd:7f:17:9b:d3:22:35:13:cf:69:25:a0:1d:e5:d6:e3:ac:aa:
8c:61:c7:de:b8:8c:9b:7d:a9:df:4c:20:b4:91:b0:a1:05:dd:
91:05:06:64:18:f3:51:78:e7:78:60:c3:36:78:97:75:8a:71:
18:c8:7c:74:ac:6e:5b:41:fe:61:93:d9:71:eb:a4:a6:97:11:
37:fe:06:09:a8:d6:ee:fb:64:21:b9:da:b7:43:9e:01:8c:93:
e2:6d:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:18:36 2026 by rpki-client