
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa
File: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (raw, json)
Hash identifier: U9w0lfuuk1z9XgLm6SG9REks+ibqmGYpsfYNVx7QvJ8=
Subject key identifier: F4:64:BC:18:C9:CA:A8:10:21:04:FF:82:83:F0:BC:2F:AF:DB:AD:FB
Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a
Certificate serial: 010D0C9F4328584CCBA74E09CD677D608F9C9640
Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 3379
IP address blocks: 2620:190::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:4e:09:cd:67:7d:60:8f:9c:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=d64f749b-6812-4fb3-aee0-776d9bb83205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:7b:6d:ad:45:1c:9d:d6:bc:ea:21:27:8c:
04:33:26:fe:aa:96:ff:12:fc:02:96:d3:d4:d9:69:
2b:27:c1:eb:64:14:7b:14:ec:e8:d3:ee:6a:16:ce:
81:4b:4b:ea:5a:b0:66:f3:c5:ca:36:58:ab:2c:6a:
48:b4:ad:4a:e0:f3:21:d9:fb:9a:f7:41:93:30:18:
30:73:08:a9:48:06:4f:4a:ef:32:41:fe:0d:53:fd:
8b:36:1e:bc:c0:ac:11:9d:8c:02:90:17:82:59:8d:
93:6d:9f:90:33:93:62:b3:42:db:40:3b:e7:1f:36:
ce:8e:29:a4:b4:1c:26:cf:7c:db:31:79:ad:8d:d4:
c3:17:a1:2b:c5:07:11:07:7f:ad:0f:93:ce:87:f2:
6b:b6:1d:6b:2e:1b:22:33:94:94:4b:56:74:98:cc:
79:58:de:86:88:d9:dc:52:ff:c3:6a:05:5f:aa:f2:
c7:81:0f:e1:17:de:4d:b5:c5:83:4f:ff:a5:2c:99:
4c:4d:41:29:1b:2b:ee:68:21:9e:61:ff:31:ef:aa:
ea:0b:ba:e2:cc:d3:99:04:54:51:d3:44:f4:c6:db:
60:b1:c7:5a:8f:07:2f:43:fa:14:ec:17:f9:3f:dd:
df:d8:69:c9:7d:77:2d:26:2a:4a:ad:8b:8a:20:19:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:BC:18:C9:CA:A8:10:21:04:FF:82:83:F0:BC:2F:AF:DB:AD:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl
X509v3 Authority Key Identifier:
keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:190::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:29:b6:a4:56:86:0a:c7:5b:52:3c:b2:cd:e1:74:cd:7a:cc:
e7:3f:94:16:b7:80:35:26:5f:1b:ae:d4:c1:ee:4e:64:62:9b:
f0:3f:59:cb:ca:1d:71:2c:19:56:06:63:ed:86:61:8b:f3:44:
a8:95:e8:4e:af:a9:61:5b:08:c7:89:b3:3e:92:00:37:d5:8e:
53:d2:10:e7:a7:48:e2:51:00:54:bc:16:37:7f:bc:ab:40:00:
ab:d8:f4:e2:e9:40:0b:46:62:62:af:00:cf:73:d5:de:e2:88:
35:27:e2:81:be:7a:54:cc:a1:9e:d8:ac:3c:6c:37:55:f6:3d:
05:e1:2f:e5:f4:d7:89:f4:0a:f9:77:56:fa:65:79:b1:79:b2:
08:e4:98:54:44:4f:e3:d0:2e:57:ae:7d:9c:07:77:cf:91:86:
1a:44:e6:17:69:e3:7f:ae:05:53:cc:15:c6:96:1c:7c:0f:ed:
69:66:12:98:3a:1f:71:3f:02:92:75:e8:6c:97:e2:37:90:dc:
fa:23:2d:31:4d:58:e9:1e:cf:65:48:20:a6:ec:29:21:b6:b1:
d9:a5:9d:5a:1b:9c:6c:c2:d5:a4:d6:ef:4c:b2:a4:ad:14:52:
16:df:86:d7:16:28:fd:90:06:ec:02:a2:46:9a:ce:57:43:cf:
53:db:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:39 2026 by rpki-client