
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa
File: e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa (raw, json)
Hash identifier: /khTzrwrkoZBa4DEx6iQ7mUH2px+YQKoCL2rfMV7ljo=
Subject key identifier: 15:D0:D9:12:9F:3B:09:D3:8D:3F:89:13:37:2B:39:E5:98:59:05:F1
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D40CA4E13F3E31A7D6D64AAC0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 11537
IP address blocks: 2001:468:ef01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:4e:13:f3:e3:1a:7d:6d:64:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=c52265d0-ecef-4e6e-9936-b0adf948222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:51:98:b2:b5:62:95:90:21:8c:c8:b6:eb:
16:f7:1e:cb:4e:dd:8c:22:fe:32:49:fb:e0:88:79:
0a:73:76:83:cf:3c:ea:34:b8:20:28:5b:c2:ac:5d:
af:6a:82:c5:14:a6:f8:24:d8:c2:cc:33:a7:af:4b:
5c:8d:04:80:70:0e:e5:26:26:93:24:92:36:d5:a7:
9c:57:67:2b:a4:d7:78:39:9b:e6:fb:9e:98:5f:8e:
3e:1f:d1:26:35:49:f7:2b:4b:03:a8:eb:78:51:19:
cc:de:dd:e8:79:0f:ae:46:f8:43:47:ef:89:62:bc:
81:53:aa:dd:0f:a8:b9:3e:77:8d:ea:b0:02:71:33:
48:ed:0a:fc:c2:52:f1:23:46:79:20:57:e8:11:92:
eb:ad:af:fd:10:48:c8:e6:42:49:db:97:d6:c0:d7:
a2:b2:73:fa:41:a1:9f:12:72:83:29:76:da:58:42:
49:89:d3:f4:4f:75:32:f2:c8:5d:94:f9:60:74:29:
70:b9:4c:af:89:81:70:c8:1b:1d:bb:e0:03:44:11:
37:a4:43:05:4c:c2:af:50:0c:97:93:0e:f6:b5:7b:
5a:ad:86:2c:71:52:68:f8:fa:a9:ad:0e:01:db:07:
1f:61:38:36:b6:42:ac:30:60:a7:13:9f:f6:b4:91:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:D9:12:9F:3B:09:D3:8D:3F:89:13:37:2B:39:E5:98:59:05:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:468:ef01::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4c:e5:46:26:2b:94:32:59:09:4a:1d:75:ca:72:56:93:2a:
1b:24:bb:9b:ce:ec:0e:45:2d:e1:19:8f:c7:73:b9:1e:ce:53:
de:5e:29:59:80:e0:ef:bc:bc:ee:28:6e:c2:d9:20:e0:53:5a:
e0:5b:4a:c1:1a:17:fd:7b:c6:3e:90:ea:d8:3f:bb:b0:00:af:
2f:0d:3d:85:e0:0c:1b:38:ef:65:6e:26:d9:56:45:a5:7d:fb:
7f:0c:c7:cc:aa:dc:49:9e:a6:01:58:d8:e0:85:bd:27:c0:58:
5b:d2:62:d7:f6:af:37:22:da:9c:b2:14:1d:13:38:97:4d:65:
2d:d9:bf:e8:c1:23:9f:70:00:58:d7:72:05:00:3f:f1:7d:d8:
14:5d:57:9b:eb:6b:23:64:53:6b:52:cd:19:1b:a0:77:04:e5:
59:46:bf:2e:e9:10:49:b3:d7:b4:7e:47:ca:c6:96:59:e6:aa:
30:10:35:bc:36:2e:cb:ea:fc:0b:4a:04:cb:97:cc:a9:5c:09:
e9:cb:2f:dc:d6:49:2b:52:e2:25:9f:15:f5:e0:3d:e7:52:c3:
28:d1:7f:61:16:0e:30:05:c9:a4:ab:a7:bf:5b:c9:97:59:1c:
27:45:11:d9:b9:34:83:12:e0:82:1e:d1:71:e6:49:1f:e6:c4:
02:6a:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:15:53 2026 by rpki-client