
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
File: 4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa (raw, json)
Hash identifier: mXupPlikrOZuiEDI8NLBA83TDJFWHtzLcEkdfrXh0f8=
Subject key identifier: CE:BC:DF:D7:87:23:1C:C8:B4:1A:A2:C0:B9:A0:B5:7F:BC:6D:31:92
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584D2644AF976BE38C323D740140
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 209242
IP address blocks: 2606:2c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:af:97:6b:e3:8c:32:3d:74:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=45c63355-eaae-46dd-99f4-24c8fb41eefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:f4:9e:90:60:bf:f1:9c:40:3d:94:ab:6d:
48:22:44:7e:51:70:26:a3:b8:2f:67:1f:36:2e:70:
92:f1:47:14:c3:ba:58:4a:d7:c2:1b:56:22:9e:ef:
00:19:ce:d8:cd:81:b8:69:11:e2:6b:83:ca:1e:f3:
d2:44:f3:44:0f:90:2f:0f:e6:ef:4c:e8:fb:9a:e8:
3d:7f:0c:29:34:65:6b:ef:bb:30:fb:ad:b5:6a:29:
cf:4a:2a:15:61:92:01:0b:4e:30:c5:7c:5a:5f:ef:
70:42:1a:05:8e:4d:fd:71:ba:e8:5d:45:3b:4b:ea:
4f:38:ba:20:b1:21:95:82:f6:39:67:70:f2:dc:74:
0d:65:9e:5f:1c:21:3b:0b:04:a4:cf:d1:36:25:e9:
8d:4e:7b:3c:e1:9f:05:0f:dc:bf:5a:78:57:10:e9:
40:38:df:30:0b:31:d3:96:76:bc:fe:74:2e:27:81:
77:f4:da:66:35:89:17:f2:1b:3a:3c:77:4c:b0:85:
3b:6e:27:af:6b:a9:4e:a4:f9:6c:05:2f:0d:2c:da:
9b:2e:f0:91:55:3a:81:8d:db:47:34:14:fc:1d:0d:
26:5c:dd:7d:46:2c:32:b1:cf:c7:7e:ea:34:89:87:
c2:b8:ff:15:4e:22:4a:54:b2:5f:7d:25:a4:a8:20:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:DF:D7:87:23:1C:C8:B4:1A:A2:C0:B9:A0:B5:7F:BC:6D:31:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:2c40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:5d:48:33:04:3f:d8:cf:24:1c:23:12:4a:14:54:7c:df:27:
26:0b:e7:5a:40:9d:74:5f:8e:e6:fc:7d:5c:ee:09:0f:8f:db:
27:32:e2:61:21:41:79:f6:da:4c:35:fa:13:b3:44:b1:9d:5b:
18:0c:a0:d0:ca:d6:2a:08:26:0e:51:2c:4c:cd:27:69:84:79:
b7:d3:9f:c8:3a:e5:33:aa:ca:a5:da:ca:18:2c:84:4f:cc:a5:
d8:bb:52:32:16:67:77:be:2c:d4:3d:63:d2:a6:85:a6:32:cf:
97:6c:47:d7:7a:6f:3d:f8:b9:35:c7:a4:c5:d9:b2:ec:13:a4:
a0:29:12:40:67:ae:65:e6:4f:ca:60:a7:cc:ce:4b:29:cd:cb:
14:a4:ba:55:75:37:b8:cd:8d:97:5c:32:a8:9a:39:67:a1:f1:
18:49:42:7e:8c:7d:a0:e2:e4:0f:7d:1e:64:84:1f:a6:bd:6c:
16:0e:bc:16:d3:30:9c:31:8d:e0:cf:81:25:f6:52:72:5c:b6:
e3:51:6b:c3:21:4e:d7:9a:cd:76:24:c9:f9:23:4d:4b:10:cf:
36:d9:cc:3b:71:e6:f0:79:bf:9a:24:83:b7:4c:0f:33:a2:57:
dd:f7:d5:97:25:d5:4f:b3:93:31:77:fb:7e:c4:e8:19:c5:bb:
07:0b:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:26:16 2026 by rpki-client