
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
File: 34f2c767-116c-381b-b77f-2c51ea9a987b.roa (raw, json)
Hash identifier: 0iniy5b7JJOAk7rDYvcxz+3vWBo6cd2aO4KDXYSeCec=
Subject key identifier: 1A:9B:2B:B4:98:58:97:42:57:83:A0:67:18:90:37:A2:E5:E4:4F:FE
Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial: 010D0C9F4328584DE9B07E4A117B8C72E5F58300
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 14939
IP address blocks: 2604:5000:2000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:7e:4a:11:7b:8c:72:e5:f5:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=9b431f3f-97ff-442a-b689-dccfb990091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:49:57:cc:44:28:8b:10:94:7e:85:ad:ee:
30:86:69:c0:61:ba:f1:bf:16:f3:e3:82:35:6f:29:
78:3d:2d:11:ba:a9:80:b2:e2:17:00:48:f3:dd:61:
d4:7e:a2:a8:18:88:57:45:1b:4a:70:89:aa:e7:57:
1b:1e:27:6a:e5:bb:19:fa:82:39:06:2e:27:f3:b5:
7b:ca:f0:18:8c:9c:d4:f9:5e:e7:f1:2d:58:48:f1:
50:57:d9:e0:3c:54:99:bc:e6:b5:98:84:4d:cc:ca:
29:1c:bd:49:88:ac:7e:9e:41:2e:6b:0c:59:97:59:
84:5b:37:f0:af:d7:8f:ce:1a:e2:c2:24:62:ff:9c:
62:61:4b:29:df:df:98:b7:98:9b:43:47:26:9f:28:
fc:4f:0e:bc:6f:e1:bd:6b:f4:10:9f:59:73:89:85:
2c:27:f5:5e:20:cb:f9:a0:47:cb:f6:b2:d2:6d:0d:
c3:b0:41:4d:c2:40:e2:7c:02:9e:b7:fa:ae:06:92:
a7:a5:e2:56:87:57:df:ba:aa:58:44:96:55:73:7f:
d7:4e:d6:2d:24:16:47:2f:18:7e:29:f8:30:d6:6d:
19:41:a6:1e:8e:3e:b0:0e:54:3d:96:12:1c:2b:94:
b9:bb:8f:cd:9a:8d:69:fb:5e:1d:aa:b2:33:07:22:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:2B:B4:98:58:97:42:57:83:A0:67:18:90:37:A2:E5:E4:4F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
X509v3 Authority Key Identifier:
keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5000:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ea:9f:10:bb:86:25:8d:1d:57:68:b4:63:22:07:58:27:7c:
53:38:ba:47:ce:46:63:7e:e3:cb:5a:9e:cb:3e:91:d2:f3:99:
9d:38:e8:cd:f3:1e:f1:5c:d9:de:f8:b8:85:95:68:8a:e1:a1:
fe:0e:53:ce:18:5d:67:79:d4:97:53:d7:a3:a2:2f:c9:c6:8e:
28:d0:01:5a:4f:e6:b7:51:03:fb:52:01:08:64:3c:aa:db:b1:
c3:5c:6f:69:05:62:7c:9a:fa:9b:36:96:38:e1:2f:eb:82:1f:
04:e0:f9:65:e8:30:65:fd:28:3e:8c:5c:78:c9:0a:d0:bd:69:
50:d9:a0:4b:ce:3b:46:ae:9d:93:6d:a5:c9:51:c6:1a:46:45:
0f:bd:16:96:94:37:2a:d4:55:0c:3e:2f:9e:f1:99:ff:75:d6:
1f:a6:4f:2c:96:ba:6a:ee:ca:f0:e5:2c:93:16:c0:24:86:4b:
42:2d:74:36:96:6c:5f:00:ae:6a:76:3f:9d:79:e6:8c:56:24:
44:f6:ec:3f:c8:37:9c:87:80:61:51:89:d0:3c:be:6e:27:59:
d2:04:b6:3e:f6:fc:d4:16:97:f1:f0:49:1b:fe:38:f9:bf:46:
04:e5:86:94:94:36:2b:c5:22:42:77:28:dc:03:08:74:46:51:
11:25:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 08:09:12 2026 by rpki-client