
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9af13fa-7056-374b-940b-37423eee8198.roa
File: e9af13fa-7056-374b-940b-37423eee8198.roa (raw, json)
Hash identifier: 23U1zitQkponAL7PrImEpPAAFhSZ+yPSYhDYyjKcSuk=
Subject key identifier: 20:99:52:66:DE:6C:DE:9D:DC:8B:72:A7:ED:0F:D6:E3:0B:F2:CF:0C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D8D8FF5D0B85F983AD8E26B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9af13fa-7056-374b-940b-37423eee8198.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 19905
IP address blocks: 2604:2d81:2d00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:f5:d0:b8:5f:98:3a:d8:e2:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=d9ccf39d-8135-4268-a07c-4241f683bbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:0a:a2:0e:cc:f1:76:35:01:13:cc:73:87:
49:3c:fa:e7:fe:e8:5e:39:43:6a:c2:73:b3:ea:bd:
4f:a3:51:87:42:18:a9:20:97:31:d8:f0:2b:6d:18:
96:8d:37:e9:5a:a6:99:ff:4f:c1:60:b6:d6:81:b5:
15:1d:c8:df:10:0c:9e:a1:61:62:ab:e6:b7:0d:77:
5a:10:d3:e9:79:58:2e:c8:81:f0:e2:eb:41:8d:b6:
05:d3:1c:e5:ba:99:e8:04:c2:17:32:5e:6e:d4:f1:
07:47:eb:77:f2:ec:60:93:47:d0:d8:71:c0:a1:d0:
1c:fc:0f:18:2d:02:c8:df:61:06:a2:59:bf:d7:3f:
af:c9:bc:b0:41:eb:37:01:3b:10:01:97:e2:ed:f2:
8f:c7:11:e9:29:e6:61:8e:2e:d9:d0:b9:56:71:ee:
2c:1c:67:d2:50:d2:84:30:4a:9b:53:1e:c6:cb:9c:
c1:4a:bc:38:09:6c:c4:d1:c3:53:a1:e0:7b:cd:1c:
ed:da:b8:54:3a:67:55:19:00:a8:ce:0d:6f:b6:25:
2d:2b:ee:15:98:c1:e9:0f:95:bf:69:cc:f8:d0:4c:
cc:46:b3:64:43:67:84:f1:eb:08:fe:1a:98:1c:ee:
f0:25:02:26:02:ae:63:e7:d7:59:60:04:33:f0:2a:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:52:66:DE:6C:DE:9D:DC:8B:72:A7:ED:0F:D6:E3:0B:F2:CF:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9af13fa-7056-374b-940b-37423eee8198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:2d00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:97:48:53:ae:0b:5a:00:b8:50:f0:27:e5:c1:26:44:50:d8:
74:46:b1:05:68:5e:83:e7:5b:2c:14:ae:23:1a:a5:cf:0b:dd:
84:bb:3d:2f:a3:5a:4e:70:74:33:f5:23:6e:30:99:89:34:a8:
86:d5:e5:55:ef:80:b6:3d:16:7a:72:84:e1:67:2b:ec:80:e2:
80:77:09:90:37:19:d1:a2:75:e0:bd:ac:32:4a:6b:b3:36:a8:
fc:0e:de:55:0a:53:a2:f1:7b:51:ac:81:d6:3c:41:36:5b:12:
ab:8c:ae:82:20:b3:b8:3b:e9:60:13:d4:10:fe:a5:c3:93:9e:
99:96:9f:85:92:7b:98:67:cf:58:2c:be:36:2c:06:de:03:4e:
d5:e1:e5:5e:60:4f:5a:b1:ae:3d:0c:4b:3d:a9:3a:23:ea:2f:
0b:bb:b8:71:d5:a9:02:85:ad:c2:e1:e5:10:f5:32:18:d7:a3:
37:cc:66:f5:e2:98:a1:34:32:de:22:8e:b4:17:5d:27:96:ee:
25:6a:14:7e:0f:1d:d3:7e:56:87:f7:72:ef:86:37:c2:f7:d1:
d5:e3:9d:db:96:fa:e6:bb:63:1e:6a:26:cd:a2:48:0a:76:f7:
40:8a:2b:58:70:14:2f:a5:59:54:a1:ff:bf:45:71:2b:73:e6:
c6:04:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 21:31:45 2026 by rpki-client