
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa
File: 649e83e9-e363-3e14-afde-69d51ff34eb8.roa (raw, json)
Hash identifier: 48Ot8HM+4Ox9AbkiibGnV4JMrQYQF50Vw+tWebnOVR4=
Subject key identifier: 10:3C:05:6F:0F:30:67:6A:93:2B:52:8D:25:C4:FD:AC:4F:35:04:D1
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584CAFBC69045608DAEF8A9A1E00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 26666
IP address blocks: 2601:2010::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 25 Feb 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:69:04:56:08:da:ef:8a:9a:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=bf9dd2ea-3437-4548-a4f8-97dcf04c3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:2d:d9:a3:c9:9e:c0:15:5b:b3:d8:05:8c:
c6:da:ec:75:ff:db:b5:f0:3e:ef:28:fa:84:36:5f:
77:1e:e0:7f:e1:82:f5:f8:8e:d8:dc:6c:36:3b:9b:
0c:4f:bc:af:01:78:79:31:4d:9a:58:a4:be:08:3d:
07:f1:da:2b:49:e0:d9:99:6d:79:3d:d6:d2:ac:11:
a3:f6:bb:ea:de:a4:e4:04:cd:fe:28:05:a8:52:d0:
c0:b0:c8:50:84:fa:e4:25:50:08:a5:49:32:8a:65:
c3:79:ff:1d:5a:be:5d:ca:49:99:7f:1e:77:bc:28:
0c:2e:3b:9e:0d:b5:37:68:0e:a5:16:c1:9f:a2:e6:
8f:94:64:d9:50:ef:48:5a:33:75:ef:08:b4:c1:af:
7c:37:1a:49:10:72:5b:1e:71:93:76:88:c3:bc:3a:
3d:c7:19:9e:c7:29:03:80:e1:d2:f1:7c:c2:f2:a3:
db:fa:6c:72:72:4a:fb:f9:b8:43:5e:fc:7e:93:76:
f2:2a:41:8b:17:3e:2a:50:d1:29:35:f1:07:08:da:
46:8f:6f:06:87:36:3b:3a:a2:87:3a:f1:8a:8d:0b:
aa:55:c0:8c:1c:86:63:49:8f:90:3d:bc:d1:6f:6f:
68:03:0c:a6:d9:28:d2:65:24:f7:45:56:cf:2c:d6:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:05:6F:0F:30:67:6A:93:2B:52:8D:25:C4:FD:AC:4F:35:04:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:2010::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ee:18:68:f5:93:5d:83:e1:0d:d0:e2:2e:3e:d2:d6:0d:14:
d5:5b:0a:63:d2:7d:74:3c:99:f8:e0:68:29:ea:a0:ca:67:37:
f1:98:70:31:87:1e:70:5a:6f:79:5d:9f:bd:43:85:f9:ce:ad:
fa:ae:30:34:09:07:79:1b:0a:bb:2f:7b:8a:9b:b7:00:40:c8:
c3:66:37:48:1c:a4:bc:0d:f8:77:a6:00:d5:6d:92:bc:d8:e4:
b0:47:b9:12:2f:87:5f:3c:20:8d:43:3e:5d:34:e6:51:e1:c5:
95:99:be:2e:cd:1f:d6:f3:21:0f:7d:a2:a3:20:a8:95:b9:b0:
4d:a4:0c:86:7c:36:a5:0e:e8:90:50:db:d1:7d:d4:d7:2d:d5:
1c:ca:d4:65:4f:a5:d8:4b:07:ee:81:02:28:b4:af:7b:2f:33:
95:e3:3c:b8:37:82:82:0c:b4:90:8c:a5:66:67:5a:fa:73:17:
a2:17:71:01:5e:07:7b:4e:26:07:dd:a4:f9:73:9a:9f:0c:4d:
bc:17:16:4d:85:3d:53:4e:0e:d0:5f:cd:95:d8:6a:f7:0b:4e:
e3:91:66:0f:b0:ce:1d:4a:2e:2f:ea:d0:01:85:48:88:4c:a9:
cc:b8:63:92:1c:e5:11:70:8f:8e:88:36:44:c4:1c:59:1d:8f:
37:c7:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 01:05:47 2026 by rpki-client