
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa
File: 23e65f7f-9582-3182-acd5-2c4e73dd7547.roa (raw, json)
Hash identifier: 5Ewnivyx+hHY5ybBt+kPWSc6FVyne6+vF0q6hde4dxs=
Subject key identifier: 0D:C1:81:DF:16:BF:D7:07:A9:9E:96:79:B5:86:E4:CF:CF:88:87:E4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D0A77A07F3D068D549B302CA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa
Signing time: Tue 03 Mar 2026 02:00:32 +0000
ROA not before: Tue 03 Mar 2026 02:00:32 +0000
ROA not after: Mon 01 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2d81:3100::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0a:77:a0:7f:3d:06:8d:54:9b:30:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 3 02:00:32 2026 GMT
Not After : Jun 1 01:00:32 2026 GMT
Subject: CN=8ba6a3d2-92ba-44cf-8e6d-bf49ec20a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:fa:22:99:77:f7:cc:35:31:bd:e4:73:5d:
bc:08:e7:01:32:d7:74:ae:2e:2e:e6:4c:2d:10:fc:
5b:68:9e:30:8c:b2:1f:52:76:ca:ac:88:bc:ab:c7:
9b:6c:33:ab:2e:4a:d6:74:d7:bd:32:f9:30:95:97:
e5:80:b5:01:1e:a1:6b:3a:d7:66:d0:9f:74:2b:43:
ee:69:84:4f:83:31:6f:08:db:53:cf:25:f9:06:8f:
9c:cd:c3:65:04:57:7a:d9:fa:ad:2a:18:49:4c:f3:
39:68:d0:ed:50:ce:63:44:05:17:e7:af:e5:8e:70:
15:65:cc:61:e7:3a:44:7b:47:a3:52:6e:7a:9c:62:
90:d9:09:c4:b8:03:d8:bf:53:d4:0b:13:e5:d9:64:
f6:0e:17:fb:bf:91:b9:3b:77:2b:83:d8:08:9f:74:
7f:2c:e4:0c:fd:29:11:0e:d8:68:ec:27:bf:83:15:
48:e6:7c:73:d3:44:6f:dd:6d:99:46:31:8b:d2:17:
21:5d:05:91:ff:0c:84:ff:c2:e8:73:58:38:bb:ab:
57:a7:0b:af:f3:bc:53:4f:ae:db:53:54:53:3b:aa:
b7:8a:22:a7:63:73:c4:1c:26:3f:71:08:ec:04:30:
3b:f3:d8:65:46:fd:a3:8c:8e:de:b7:3f:3a:fd:d8:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:81:DF:16:BF:D7:07:A9:9E:96:79:B5:86:E4:CF:CF:88:87:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:3100::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:34:c6:76:ff:03:e2:ff:12:3a:5a:27:79:81:d9:72:bd:35:
a5:09:33:c0:1c:51:85:fe:26:66:fb:35:f7:91:65:38:63:5a:
f2:fc:8c:5f:e0:72:79:54:41:e9:55:b5:2a:25:69:ef:7e:a9:
34:3e:27:43:ba:28:02:bb:9b:0b:b5:72:00:04:a3:f9:8e:45:
88:de:ee:96:77:0c:93:24:c4:10:89:6f:a7:9b:df:9d:95:42:
85:c4:b8:3c:7d:1b:16:99:81:cc:fd:6e:01:e6:d1:23:76:a4:
4b:72:0b:bf:1e:33:41:be:fa:70:03:1a:76:13:a4:33:10:67:
26:5a:ad:04:3d:fb:22:cc:5e:61:91:e6:86:c8:f1:92:40:e2:
6d:b3:bc:d3:e8:25:44:ad:eb:18:bc:7f:3d:65:15:8b:51:f9:
54:b6:80:ec:71:bc:ea:6a:8a:90:98:4b:11:70:02:ed:85:f5:
ae:e0:4a:c5:fc:43:46:5d:e3:29:7d:db:69:0f:c2:57:e1:22:
38:3d:0f:28:68:66:86:ea:fb:74:18:a8:97:3e:34:a6:10:da:
f7:e5:34:f5:93:e9:38:e3:d8:49:92:4c:af:39:c2:9f:03:14:
f7:fc:d2:fe:fc:c2:d3:be:48:85:06:b2:24:73:79:bd:09:18:
f4:30:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:14 2026 by rpki-client