
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e8d00e9b-54a3-31eb-93ad-b68855003d89.roa
File: e8d00e9b-54a3-31eb-93ad-b68855003d89.roa (raw, json)
Hash identifier: voqzzWVkf/vX27Ut3qVg/lM4KhGibU7OrQdVcpPYw2M=
Subject key identifier: 43:58:4F:97:84:39:FC:47:89:76:81:A4:2D:E4:68:A4:B4:5E:8E:16
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584DA7896315EE221052DED48960
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e8d00e9b-54a3-31eb-93ad-b68855003d89.roa
Signing time: Tue 28 Apr 2026 08:18:23 +0000
ROA not before: Tue 28 Apr 2026 08:18:23 +0000
ROA not after: Mon 27 Jul 2026 08:18:23 +0000
asID: 212238
IP address blocks: 2607:740:7f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 07 May 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a7:89:63:15:ee:22:10:52:de:d4:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Apr 28 08:18:23 2026 GMT
Not After : Jul 27 08:18:23 2026 GMT
Subject: CN=f809fa0f-a49b-4544-86e7-25ddf2001e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:44:08:d6:18:5c:27:93:f3:ed:44:37:0e:
31:55:94:98:8c:46:30:3f:23:f5:a8:69:77:ea:05:
74:33:e2:73:f6:9a:46:85:35:11:45:84:38:f6:1e:
15:c3:88:ce:93:87:6a:5a:19:7f:e0:93:5d:4b:00:
15:2d:15:c3:3e:66:15:22:bf:e5:e2:23:f2:e2:97:
e1:d0:a2:da:48:4d:91:c7:b6:e5:eb:68:2c:30:cb:
9c:69:18:08:67:a0:58:e9:24:88:16:5b:3c:bf:8c:
ba:f9:21:c5:7c:7c:1c:59:31:ad:18:d1:cb:f7:c1:
84:ad:cb:2c:96:be:a2:9e:b8:a3:9f:89:ba:06:24:
12:d0:7f:25:62:aa:de:9a:c3:cb:4b:de:5b:bf:1b:
08:3a:7b:ab:52:92:c4:8f:9b:48:3c:ce:8b:79:52:
70:f9:ae:e3:c5:d1:1f:73:6d:3d:b9:bc:7b:ab:14:
0e:65:fd:98:2c:74:b5:d3:ec:7d:aa:8d:e2:89:9e:
0f:3e:f9:54:11:1c:0b:1f:27:65:7c:10:0f:6a:d5:
26:44:36:cc:37:73:dd:6f:45:20:e0:26:f6:65:4f:
da:3e:9f:1e:e5:06:e4:7e:5f:2f:37:86:65:2b:4c:
d9:77:7e:7d:a1:29:26:1d:75:56:84:4c:20:62:52:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:4F:97:84:39:FC:47:89:76:81:A4:2D:E4:68:A4:B4:5E:8E:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e8d00e9b-54a3-31eb-93ad-b68855003d89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:7f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:fd:a4:b3:ca:7a:68:04:e4:b2:1e:43:a6:65:34:b8:06:5f:
00:57:0b:32:60:38:32:03:01:3b:6d:e3:a1:c1:5e:cf:3d:cb:
ba:fd:f0:34:3b:76:35:5c:e9:a4:7a:16:68:06:c9:ee:a5:e1:
78:c1:5f:a3:6e:3d:8a:46:1d:36:ba:a4:6b:8f:d8:ef:ac:4c:
aa:cd:b2:57:0c:a5:b4:60:37:1f:65:4a:3a:99:3b:74:3a:f6:
09:a3:03:d9:88:dc:ba:eb:7d:44:dc:54:65:90:b1:2e:12:26:
ea:74:81:35:05:9b:20:31:c6:fe:b1:bf:37:b3:f9:02:45:f5:
8b:a7:6f:54:bd:e7:32:1b:16:21:64:13:97:e0:a6:c0:e4:82:
10:82:a4:b1:d0:01:71:3a:d0:3f:00:56:53:79:67:f6:dc:76:
a1:38:64:96:55:2b:f8:14:da:06:ab:1a:23:8e:6f:88:0c:e2:
ce:f0:61:76:fb:97:a9:c6:b2:e4:5c:ae:be:7e:78:3a:91:01:
3a:91:78:06:3f:cc:e8:61:ea:c9:0e:18:3e:fb:8f:13:5d:57:
cf:ae:f9:3b:5c:30:b5:7d:0e:60:de:c1:57:17:d9:ef:a7:2e:
56:75:14:d7:4a:58:1a:83:69:bb:31:f4:b2:2b:94:45:02:7b:
af:e2:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client