
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json)
Hash identifier: V/vDoICk7OpBVxMv6gNYMn8/lGFA2Wi8xH3P7TsqDW8=
Subject key identifier: 95:02:AA:6E:71:3A:0E:04:ED:51:F1:E0:0E:77:26:CC:33:76:51:D7
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584CC611EB072286364E4C87A180
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 30242
IP address blocks: 2620:84:c000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:11:eb:07:22:86:36:4e:4c:87:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=b456f78c-701c-45e1-8f1b-9f373a5c1829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:10:af:8c:c2:16:ae:90:98:4f:13:4a:39:
68:78:be:b4:80:5a:36:8e:93:35:42:d1:86:d1:f0:
f4:25:e6:dd:e2:b7:8e:96:b0:d1:36:03:0d:9f:44:
a6:e6:7f:01:89:14:2e:7f:fb:8c:94:cf:0f:85:5a:
3b:1e:5c:98:8e:da:84:6c:34:37:1a:05:30:4d:09:
08:93:0b:3f:19:08:13:51:04:46:68:71:6b:f7:35:
fa:fa:4b:43:d0:8e:7c:58:19:d1:59:e5:1a:70:a6:
c6:87:75:06:5c:a9:9c:6b:4a:56:1e:e4:bb:b9:4d:
cd:38:32:4b:be:11:9a:1a:e3:d6:51:63:42:96:de:
c7:b4:00:86:67:b8:11:c6:91:fc:fe:d3:28:f6:dc:
ac:4e:51:c4:b5:45:2e:94:34:61:23:e6:cf:33:c0:
7f:c9:8d:6f:24:2e:8a:8e:a8:d8:c4:b0:21:e3:82:
47:fa:05:c0:4a:7d:fb:82:dd:77:e5:38:28:8e:39:
2d:09:da:2f:42:da:18:9b:31:23:1f:8f:c6:c9:57:
79:70:dc:4c:ec:41:32:d0:ef:5e:a1:05:c0:bc:58:
16:82:06:2c:88:fa:c7:95:47:9b:4d:be:c0:13:96:
33:a7:ca:22:99:3a:fd:9a:2c:3e:d8:a0:3f:90:60:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:AA:6E:71:3A:0E:04:ED:51:F1:E0:0E:77:26:CC:33:76:51:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:84:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5b:03:c2:a6:48:36:c7:1d:66:d3:47:3b:f2:cd:5b:cb:43:
c9:40:7b:34:11:13:00:94:6f:0e:33:74:31:33:f9:60:f8:fc:
53:b1:6b:10:10:74:9b:9d:a4:aa:0f:78:ee:a1:58:61:6e:de:
16:14:1d:20:a5:98:a0:21:ed:b6:c4:95:11:1e:78:f3:76:60:
7d:3a:db:12:a6:22:f3:1a:fc:b6:09:3f:7f:02:88:a7:f3:e2:
44:f8:ff:91:e0:e3:3c:f1:08:5f:45:d1:32:8c:06:79:69:fb:
ba:36:0b:d5:64:f8:80:9d:39:49:9d:f5:ad:9b:03:b3:94:08:
9a:8c:5d:92:c9:00:a2:12:52:5d:d7:cd:2c:7a:17:e7:6a:cb:
c8:a3:e1:f5:77:ee:ce:0e:9e:3d:c7:fa:a6:1f:b7:58:00:3f:
d3:25:70:ae:77:b8:c3:c7:c6:98:dd:77:af:c7:da:77:42:5a:
04:06:59:25:f2:d4:02:b7:62:4e:c7:90:e9:08:31:54:96:9c:
d1:ca:7b:fe:52:51:ce:ca:3b:d1:42:a9:22:70:dd:92:a4:b5:
34:9b:0d:e6:67:74:df:55:11:7a:bf:fa:56:c7:5b:90:34:67:
81:d6:77:dd:33:ba:65:80:c8:95:e4:83:23:24:5b:d2:d0:96:
60:1f:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 19:33:48 2026 by rpki-client