
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
File: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json)
Hash identifier: EgQBk92fiJG1O3a0vD5OY2RAW4Zy0u+Hi0K1k+1Ei5M=
Subject key identifier: 2B:7D:FE:B2:21:A5:C2:7D:6D:BE:A0:9E:A5:9B:E3:57:0B:1F:35:D7
Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Certificate serial: 010D0C9F4328584D67DFD035F22C76B75E1F9D80
Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 396328
IP address blocks: 2607:c0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:d0:35:f2:2c:76:b7:5e:1f:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=ce108f8d-7f0c-4a50-8e40-7b7e959966e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:a9:67:7c:dc:69:f6:22:a7:29:55:eb:bb:
3f:22:f7:a9:99:f5:e3:7c:43:18:f4:ec:df:e2:f0:
98:99:87:53:cf:9a:e5:27:f9:2d:46:d7:15:ea:c6:
c7:3a:e7:59:50:07:b8:ad:29:b8:89:ad:72:c5:07:
e8:11:92:a1:6b:fd:b3:3a:df:04:51:d5:9a:83:1b:
7b:b5:0e:83:3e:02:e5:40:d0:9c:08:8a:52:07:d8:
97:fd:32:17:a5:ce:04:9f:a2:8b:05:34:db:32:4e:
51:a9:85:82:6a:5e:cc:5d:27:c6:1f:c4:27:7e:1b:
78:3e:28:6a:de:1b:11:fa:5a:41:71:8c:af:34:c9:
5a:84:4a:fc:2d:a6:59:81:c5:3e:fd:29:0c:34:37:
74:7a:27:63:22:b3:84:5b:25:97:82:e7:d0:d0:60:
13:35:e7:69:f1:db:45:65:9a:e7:1d:39:c8:56:dd:
ec:cc:db:49:ce:20:82:f1:82:1e:87:b3:1f:87:ed:
31:98:03:9e:ab:c3:ee:76:ed:fa:44:10:ab:52:35:
0d:23:ed:1e:c6:fc:03:3b:d5:f0:84:01:92:a5:d0:
55:d8:e3:54:d1:05:7c:2a:9e:1e:9f:d7:a0:8d:a4:
19:8f:fc:9c:8f:41:eb:e0:4f:0c:e8:ea:ca:cd:75:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:FE:B2:21:A5:C2:7D:6D:BE:A0:9E:A5:9B:E3:57:0B:1F:35:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
X509v3 Authority Key Identifier:
keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:c0c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:57:1e:86:39:d5:b8:31:7d:e1:19:07:98:b5:a7:55:2c:fb:
6e:3e:65:27:e9:d9:81:cd:cb:91:6e:b1:f3:77:c8:33:d7:d6:
b4:d3:34:64:d4:f6:2b:67:10:5a:b2:8b:f9:f5:31:9f:dc:16:
f4:94:c6:20:92:68:9c:c7:09:f5:17:9b:5f:4a:53:7e:f3:9a:
ac:a0:39:e2:1f:41:0e:70:88:f5:fb:51:79:5f:3e:40:52:54:
2e:a9:20:ff:bb:f9:0a:15:46:21:eb:e2:32:5e:81:78:3e:a8:
d6:4a:c2:a5:d1:b8:e7:97:f0:89:39:e0:e3:be:60:93:25:e0:
7f:3c:98:94:44:92:a9:dd:99:5a:18:0f:2b:17:a5:4e:0a:ac:
94:99:ee:92:7a:73:43:b9:5f:7f:9a:de:18:6c:0f:1f:ef:f9:
b7:77:18:55:d1:40:03:d5:99:6b:d3:b3:4f:9d:f0:cb:67:ee:
90:ee:df:1f:d1:32:b7:49:9b:02:67:df:4e:56:ae:2f:fa:ac:
ac:fc:8d:7d:5c:42:d3:62:0e:46:cb:44:d3:39:18:81:04:82:
31:ff:50:30:ad:2e:12:ef:9a:c7:74:fb:82:71:99:2f:9d:a5:
48:7d:29:1c:b0:01:99:11:36:8c:c0:80:16:5f:1e:21:3b:1c:
1d:61:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:44:24 2026 by rpki-client