
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
File: bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa (raw, json)
Hash identifier: ni02NLFlFaYHWm2meFs2h762gKD5TbS6E7QOh4xpeFA=
Subject key identifier: C6:53:2D:78:4D:5A:00:1C:BE:8D:31:AA:A6:11:EB:CE:7D:D1:ED:7A
Certificate issuer: /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial: 010D0C9F4328584D1F4A42AB984C85B26E929980
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 11711
IP address blocks: 2607:f068::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:42:ab:98:4c:85:b2:6e:92:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=76ab4945-d78b-42c3-aa36-5a6b4b96e57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:bb:02:be:d9:bf:a6:13:d6:5b:fb:4c:31:
3c:50:8f:64:3b:93:40:71:19:aa:4d:6b:21:a4:5a:
d5:49:2e:46:26:22:4f:36:77:9e:46:c3:7c:81:c7:
20:49:bb:7a:8a:bd:b9:79:fc:e6:59:29:6f:d5:e1:
26:d6:3f:de:70:c5:67:e1:c4:0f:9e:41:19:6d:b7:
be:f2:97:cf:1c:fb:64:91:f2:ec:76:45:1e:3d:26:
0f:7b:ad:34:11:1c:ae:0d:79:30:5c:a7:9d:96:13:
10:6c:92:00:71:17:a4:0e:d0:9b:7b:f0:98:61:e7:
da:05:93:fc:dc:22:3f:89:21:8f:ce:4a:57:e8:ab:
8e:db:ed:81:c7:96:1e:7c:f9:f1:e2:f4:76:05:e6:
97:f5:26:59:19:3b:4e:fa:4a:2d:ae:cc:af:48:65:
70:06:9d:28:72:3e:5e:86:1c:ca:dc:29:fe:15:5d:
8a:3c:17:d8:8f:fe:0a:4c:3e:8d:fe:45:99:4e:27:
89:48:85:3f:18:09:1b:0c:a0:df:95:0f:bf:ca:47:
f3:17:58:f4:86:fb:db:1a:d4:c2:bf:7e:9c:99:5e:
67:3c:b8:8f:ff:48:a2:34:0b:75:e9:be:e4:e6:2e:
18:2d:c1:fc:ba:ca:99:d9:99:59:c4:55:99:a4:9d:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:2D:78:4D:5A:00:1C:BE:8D:31:AA:A6:11:EB:CE:7D:D1:ED:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
X509v3 Authority Key Identifier:
keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f068::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:07:1e:a1:a5:ae:ef:52:59:b0:b3:33:c1:7f:bd:a6:cc:cd:
22:1f:d6:06:9f:e7:5b:f2:cd:77:be:f0:63:f4:f7:53:30:d5:
af:0b:0c:e1:23:29:74:4f:53:29:5c:5c:3e:1d:a8:85:53:76:
b7:e7:e7:b4:63:af:b6:57:cc:ec:95:38:3b:98:f0:5e:a0:5f:
28:b1:42:98:99:3d:af:94:3c:fc:df:0f:b9:ea:f2:f5:82:a4:
5e:cb:0a:a2:12:25:c4:35:d3:b0:81:39:97:20:f1:56:0b:7d:
3a:f1:a4:cc:ed:b9:72:d0:1a:8c:f4:44:82:73:33:cf:7b:92:
db:0d:14:42:7f:1b:2d:33:21:88:06:22:25:ac:77:ab:dc:f3:
2c:0f:2e:7f:1f:f4:be:7d:d1:86:c8:6b:5d:a9:38:49:b0:32:
26:e3:ad:65:05:14:b9:10:9b:18:12:61:d5:7e:20:68:54:ec:
68:b2:ff:9f:43:0f:04:56:eb:6b:74:a0:cb:d2:e7:c7:fa:fe:
cd:3d:26:52:ad:ac:23:00:ae:15:f0:e9:f0:63:a6:0e:28:a1:
54:62:3e:13:a4:51:fa:12:11:57:52:cb:dd:ef:a8:28:e1:d9:
d6:b9:52:5b:8a:f6:9c:48:ff:60:71:8d:84:cc:58:6f:8d:7c:
87:e2:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:01:00 2026 by rpki-client