
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
File: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json)
Hash identifier: M5AfNKbSVPhdrz2C2I3Fg5vtVC8zI0TBfONa4NKGQWw=
Subject key identifier: 62:C1:54:FA:94:73:F8:EC:F3:04:D0:0E:93:38:67:21:75:E8:F4:44
Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Certificate serial: 010D0C9F4328584E482492B7393E43FB0437FDB0
Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 396328
IP address blocks: 2607:c0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:92:b7:39:3e:43:fb:04:37:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=489de0be-3321-4472-b2bb-43f3400c982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:ec:61:5e:58:3f:7d:c8:a5:bd:ec:38:4c:
1d:e0:24:12:3a:0c:29:5c:e3:23:e3:b2:9a:fb:8a:
28:77:84:00:4b:24:64:8c:57:7d:aa:ca:70:28:80:
b4:ba:f5:d1:08:cd:d7:ce:dc:d5:4f:0f:84:78:a3:
5a:dc:ba:9d:fe:8a:df:c0:ba:24:1c:b6:ac:5c:3a:
70:db:37:ad:a7:8e:ee:a2:db:a1:4e:b9:87:57:6a:
ed:eb:d3:0e:c5:c9:5c:51:d6:b4:cc:cd:a0:7a:88:
bb:e6:ba:21:37:fe:2a:8c:94:ef:9e:40:c2:c0:0e:
42:c4:a5:45:60:b7:6c:46:5d:b4:65:ed:6d:fd:c3:
89:dd:b7:c9:a4:eb:b0:e8:df:9f:06:9f:56:9b:d9:
bb:60:b2:c5:19:50:c0:7d:cd:a0:71:03:1d:6e:22:
66:05:92:2b:49:7e:d6:4a:0f:ac:cc:11:8a:91:97:
ef:8b:bb:5f:cb:b5:51:3c:8d:d2:48:59:10:92:a0:
e7:72:50:ca:13:62:32:8e:a4:d0:e6:82:ca:dc:a5:
c5:85:03:4f:b8:6e:01:b9:a9:65:90:b4:50:4c:c0:
27:3a:2f:5a:33:08:ae:d5:51:e4:52:fd:c6:88:e9:
54:4f:1e:d4:3b:83:38:d0:f6:c8:83:4e:db:c7:e5:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:54:FA:94:73:F8:EC:F3:04:D0:0E:93:38:67:21:75:E8:F4:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
X509v3 Authority Key Identifier:
keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:c0c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:6b:2b:8b:22:91:03:41:f2:2a:39:ad:52:14:38:d4:2d:ba:
33:4e:00:2d:bf:53:04:f8:33:80:52:dc:f4:67:a1:1e:2d:f7:
6c:02:be:e7:62:c4:42:8b:9d:c3:49:18:e8:00:79:80:33:e4:
f7:40:96:23:aa:c4:57:24:ba:25:05:f6:0b:c3:73:8c:cb:a3:
86:b0:6f:45:bc:92:49:66:53:39:33:fb:38:eb:34:04:d3:e8:
40:18:32:1a:04:b3:84:39:37:1e:f9:89:58:58:52:e5:a6:5a:
a8:36:82:3a:3d:91:2a:44:71:bd:8d:b1:84:50:ff:b3:d1:8f:
93:d8:21:68:f2:1f:6c:f4:5c:fc:eb:85:de:4c:6b:8d:52:e6:
b1:de:aa:79:24:e4:a9:85:01:a3:3a:56:2f:65:8e:b9:23:34:
5b:05:cb:e5:0f:16:99:43:b0:3e:5f:13:e2:02:3c:8a:38:b5:
07:18:68:a0:e2:da:38:b4:a4:a9:b9:6e:5e:57:e6:51:cc:b5:
82:60:20:7f:80:41:13:48:be:9a:3c:fc:9c:cf:91:1c:2a:a6:
eb:00:f7:5f:b2:7e:1c:cd:db:7e:82:34:77:b2:0c:e5:46:48:
9d:ec:17:9f:49:0d:3f:a5:c1:c0:50:aa:53:18:88:9b:70:73:
28:8e:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:40:02 2026 by rpki-client