
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa
File: 85327b21-941f-3e4d-b13b-7e28774ba9ad.roa (raw, json)
Hash identifier: jmV4Hef7P6TQubMtdd5gdgNn5CLm2PgbNJxrosBhngU=
Subject key identifier: F9:FC:FF:13:69:56:B0:AB:D5:C3:7B:9D:A1:98:09:08:22:56:B7:BA
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584D0912561EEC9FA2AF97145280
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 9009
IP address blocks: 2607:740:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:56:1e:ec:9f:a2:af:97:14:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=656ddba0-98c2-4fe8-b132-7815029f4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:9e:8b:f3:11:f6:cc:a1:9b:33:22:57:de:
d1:d4:bb:bd:76:21:bd:d6:b8:58:a3:7a:2c:7b:bf:
ec:6e:23:ab:a3:60:99:55:5e:83:8a:c8:10:bd:74:
58:55:2f:d2:f7:ac:11:7c:51:12:1e:f7:57:c7:5b:
9d:6c:ba:45:f6:69:e2:37:9d:12:7e:99:6a:f3:44:
8b:95:69:25:0f:a7:57:17:b2:d3:a9:bf:56:1c:ed:
06:dc:af:60:6d:74:80:a5:25:d2:4e:1d:93:43:4a:
45:30:20:39:c4:df:58:5d:ac:0a:6c:70:11:2d:ae:
a8:3a:f3:1e:c3:b3:24:c7:a7:e5:72:85:a7:12:15:
01:f1:d4:75:56:1d:30:c5:6f:98:0b:e0:ad:97:68:
68:15:94:58:00:15:10:a6:95:d3:f1:b7:06:f7:ea:
07:e4:52:8b:89:b1:58:7b:0b:0f:7e:f2:ae:fd:74:
7f:e5:90:4e:17:e1:7a:16:e4:3e:ff:83:b8:8d:43:
f8:b0:e0:d5:7f:35:7a:6e:44:d7:78:2c:38:71:f1:
d1:4c:24:e9:91:9b:cf:eb:b1:0a:79:27:d4:6b:a4:
d2:1c:e9:5a:92:ce:10:37:70:82:45:d8:ab:48:78:
6a:ca:a9:39:f3:ea:f6:4f:f0:93:8f:45:a2:a1:75:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:FF:13:69:56:B0:AB:D5:C3:7B:9D:A1:98:09:08:22:56:B7:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:2f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:fa:c1:2a:21:71:ee:3c:08:8b:80:b1:d7:4e:10:e5:2c:04:
7b:75:2b:19:08:a3:14:27:c1:b1:6b:41:0a:4b:a3:77:89:de:
08:43:da:bf:76:04:e4:ef:b1:6f:a0:9c:49:d7:8b:c6:8d:18:
1d:56:7e:ca:7f:6f:40:78:ee:02:88:c7:8d:ef:44:c9:74:8e:
a8:6a:a5:95:4f:50:f4:0d:14:f0:32:54:cd:cf:35:03:63:72:
37:bd:1a:b8:8a:35:bd:c7:e4:35:e3:e2:75:b9:4d:99:b2:ed:
dd:c5:e0:3e:9d:40:9c:32:ee:4f:ff:35:85:5b:a0:85:08:f9:
c8:3b:70:2c:c3:b9:c9:db:61:4b:c3:a2:57:dc:fe:44:8a:f8:
0e:21:dd:a1:73:fb:15:95:6a:0a:36:ce:f5:fb:b2:71:6c:de:
02:d3:5a:b9:87:fa:a8:08:cc:6c:6c:3b:d3:ad:6d:ed:1d:2d:
45:dc:a8:88:34:e4:56:4a:3e:e0:ce:c4:80:46:e0:57:a8:5c:
da:70:30:49:c2:c3:6a:e3:94:b2:4a:d8:ea:e8:c7:bf:fe:75:
48:34:27:98:c9:9e:f9:f8:fc:a5:fb:1d:23:1e:d7:5c:58:a8:
e8:5c:22:d4:96:d3:d1:3b:e4:b1:31:1e:59:a0:d5:03:c1:50:
49:c9:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 09:44:10 2026 by rpki-client