
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
File: 61413741-9901-33ca-be44-090d9830ff16.roa (raw, json)
Hash identifier: OFkOA9NyuOfK+tidI6CXqJfHxOhNgX/VCo5ixWAWdG0=
Subject key identifier: 1D:03:9E:2C:54:18:CC:E7:8A:23:4F:07:A8:A3:30:D5:33:19:5F:31
Certificate issuer: /CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
Certificate serial: 010D0C9F4328584D9E501333BDEF48183F15EA40
Authority key identifier: 44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 396431
IP address blocks: 2620:53:a000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:13:33:bd:ef:48:18:3f:15:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=6a70d1b7-faf7-45db-a5cf-b03f28702d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:b7:09:9f:7c:54:60:66:6a:7d:45:f3:89:
02:86:eb:e4:50:9c:9f:6a:64:27:04:25:6e:44:57:
53:93:ee:1e:f4:4c:18:38:a5:bb:fd:a6:36:30:0b:
bd:7a:9c:99:50:9d:70:b6:2c:75:38:3d:80:42:cc:
b4:f6:6c:6f:d3:c1:26:f5:bc:11:61:7f:79:51:c0:
83:32:00:cb:71:3e:a4:29:51:f2:2c:b2:ac:38:df:
b2:77:38:6d:12:aa:fe:19:16:8b:15:e5:72:fe:56:
d7:44:4a:c7:51:4c:de:8b:44:9c:38:50:54:62:9c:
37:d2:80:0b:ca:cd:d9:e8:c8:c4:4a:17:84:6f:e1:
a7:14:0d:85:31:92:4c:09:09:fb:5a:b3:93:64:65:
64:88:db:a7:16:95:36:2b:96:ae:26:8c:d9:47:aa:
10:56:85:cc:3d:0d:8a:3b:bf:3d:5a:95:c0:92:c8:
39:0a:0e:ff:97:59:81:8d:e3:54:41:eb:b4:56:f7:
09:c4:18:5d:c2:bd:b8:5f:54:96:76:32:d5:ce:ef:
99:70:b7:46:21:45:8f:e2:87:a6:64:db:48:7a:14:
7a:96:53:4b:28:e0:1f:9c:f7:14:f3:9b:4e:07:9e:
d2:6b:99:a0:27:f7:a1:43:95:db:2d:19:fa:76:83:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:9E:2C:54:18:CC:E7:8A:23:4F:07:A8:A3:30:D5:33:19:5F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl
X509v3 Authority Key Identifier:
keyid:44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:53:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:4d:b8:87:d4:03:b6:b3:3b:f6:08:54:5a:78:83:0c:b9:7d:
37:a0:44:63:89:ee:39:37:94:f5:57:e9:cd:ba:21:68:96:f8:
82:a7:e3:f7:44:b8:74:ee:fb:6a:df:3d:aa:a8:26:65:4e:f4:
34:a4:9c:3f:5f:12:02:73:03:a0:a6:46:63:d6:59:6a:08:c7:
c8:40:0a:e7:19:69:3c:94:77:8b:d0:06:f5:7e:d1:e5:e0:99:
82:19:ff:4b:fa:b3:e4:b6:94:f3:18:f4:69:31:f5:24:69:b8:
66:41:27:e9:b0:83:69:92:df:ad:67:b9:83:be:64:ad:90:b8:
2e:7d:ed:9c:e0:9b:73:96:ac:d0:f6:28:ea:a8:eb:43:d2:e7:
cc:0b:db:81:d2:7b:ff:79:53:91:5d:9d:e4:9f:af:21:6d:8b:
e8:25:80:80:e7:17:73:e5:54:42:81:45:a7:60:9e:54:2b:3a:
e9:1b:33:5a:a2:aa:a4:4b:e7:79:1b:80:a9:95:a0:e7:5f:b1:
81:0c:48:40:15:ba:8a:22:1c:6e:3b:5d:89:a9:d6:40:ca:93:
96:81:3c:7a:90:13:2e:74:c2:fc:a5:78:80:45:c5:2a:18:33:
54:3d:1e:c0:24:48:d5:05:60:a8:f7:e2:0a:ee:4c:10:ef:86:
c2:69:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:28 2026 by rpki-client