
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d1b48952-b4b1-3566-afdd-ab9903467717.roa
File: d1b48952-b4b1-3566-afdd-ab9903467717.roa (raw, json)
Hash identifier: fg5H5oxP8q5zoH0w8WvaWeibIjKuC09MbzJZ9JjACXo=
Subject key identifier: 48:FA:D8:CB:5D:38:93:F7:CD:75:1A:97:86:38:87:E8:7A:80:25:59
Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial: 010D0C9F4328584D5454E60C66453C558BE1AF00
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d1b48952-b4b1-3566-afdd-ab9903467717.roa
Signing time: Sun 29 Mar 2026 13:00:30 +0000
ROA not before: Sun 29 Mar 2026 13:00:30 +0000
ROA not after: Sat 27 Jun 2026 13:00:30 +0000
asID: 203023
IP address blocks: 2602:f93b:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 31 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:54:54:e6:0c:66:45:3c:55:8b:e1:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Validity
Not Before: Mar 29 13:00:30 2026 GMT
Not After : Jun 27 13:00:30 2026 GMT
Subject: CN=a0e0d063-6f1b-48b2-8176-3c5e9fe8bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:51:21:41:c5:85:c8:82:46:b2:9d:c0:7e:
7a:51:fe:47:37:15:78:15:53:4c:31:60:e2:46:a6:
fd:96:c2:0b:c3:52:65:5c:8d:90:6b:3b:ce:f0:e7:
a2:88:61:f6:c9:2c:aa:48:b7:e7:54:54:eb:24:ba:
e8:e9:89:45:65:7e:60:9a:b3:13:17:5c:92:1a:58:
92:0a:0f:16:51:b8:15:ee:6f:98:4f:ab:17:f1:79:
8c:c2:51:8b:ef:17:67:ef:b1:9e:25:59:06:0e:53:
77:b3:5b:d9:40:89:4e:f3:cc:a9:47:38:e6:59:a9:
c3:7a:1e:e0:bd:17:01:a1:6a:24:e7:e7:46:43:61:
44:2c:ff:bd:5e:96:49:79:ab:45:cd:7d:cc:68:d9:
82:29:13:59:e0:72:dd:05:1d:e8:e5:af:bd:87:0c:
75:ef:29:5f:f2:25:3b:83:ba:b3:9e:ba:5c:04:8b:
20:82:eb:e1:5f:43:68:17:2c:7a:50:ad:06:06:84:
4e:9d:45:7c:c0:5e:62:4f:0a:fd:0e:fa:8c:99:f4:
c3:42:c8:6c:37:2a:2e:83:80:cd:d2:d3:13:c1:7b:
cf:9f:f9:4c:83:34:ef:58:81:f8:1f:78:86:1c:52:
36:14:ba:6f:ba:1b:f6:78:ab:a6:28:b3:c6:82:23:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:D8:CB:5D:38:93:F7:CD:75:1A:97:86:38:87:E8:7A:80:25:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d1b48952-b4b1-3566-afdd-ab9903467717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
X509v3 Authority Key Identifier:
keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f93b:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ad:00:aa:f4:b2:5b:24:58:94:7c:05:20:2a:f6:03:45:b2:
02:32:94:e0:ea:cb:4f:5e:e9:01:fd:77:af:fe:ea:4c:6d:16:
e3:a7:5f:bc:6e:46:02:ae:06:d8:cc:f0:93:f0:3c:9b:11:9e:
c2:bb:5f:83:8a:31:c3:14:1d:f7:c3:20:fd:9e:52:6b:e5:28:
27:a5:74:58:fb:a9:76:bb:17:27:08:6c:0d:76:fb:92:36:1e:
e1:83:ee:b6:53:55:27:f0:d7:ac:dc:dd:60:8b:1b:44:6b:a8:
de:9e:dd:4c:f5:2f:59:d3:60:0e:08:37:04:3b:70:78:fc:41:
fc:9a:14:b5:38:34:cb:f0:dc:e6:31:fa:fd:b5:bf:09:15:44:
6f:f8:ad:71:88:e0:09:df:1c:36:b2:d9:02:14:9f:dd:49:ad:
c4:c3:93:1f:7b:01:53:ca:84:4c:08:aa:2f:79:23:a0:20:04:
53:76:2b:99:a2:25:82:9c:eb:6b:3e:e5:d9:2e:3c:31:14:9a:
9b:3d:9c:2e:c7:c4:40:83:ff:a6:a7:e6:6c:58:95:22:46:9e:
1c:20:51:24:4e:b0:33:62:b9:ca:be:e9:12:91:52:a0:43:a4:
48:57:10:8e:11:a2:6b:43:ba:f4:87:6f:79:03:cb:43:8b:c8:
b9:c6:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:07:05 2026 by rpki-client