
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
File: b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa (raw, json)
Hash identifier: WctAwTEwcIOEq7yc2H6cVwMj0W8EBF5hDBEH7Z1c7y0=
Subject key identifier: A1:31:E8:5D:A8:A2:F1:66:05:54:8A:96:C7:D7:62:51:3C:FC:D5:32
Certificate issuer: /CN=387b8a97-889c-48cd-b72e-4329cc21745b
Certificate serial: 010D0C9F4328584D9B8557AA7218F9A8C052ABB0
Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
Signing time: Fri 24 Apr 2026 01:00:23 +0000
ROA not before: Fri 24 Apr 2026 01:00:23 +0000
ROA not after: Thu 23 Jul 2026 01:00:23 +0000
asID: 398127
IP address blocks: 2607:a6c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9b:85:57:aa:72:18:f9:a8:c0:52:ab:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b
Validity
Not Before: Apr 24 01:00:23 2026 GMT
Not After : Jul 23 01:00:23 2026 GMT
Subject: CN=2d76cde6-b785-4232-9f61-736d82b54420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:6b:45:94:7e:57:bb:93:90:9b:44:9f:07:
a8:8b:5b:61:eb:c4:ff:a5:c0:0b:fb:b6:dc:10:43:
bf:96:50:f4:4e:b2:66:98:52:67:f4:a3:0e:9e:82:
cd:da:bc:5e:75:bf:13:7a:34:30:7e:fa:12:fa:b5:
04:ee:3b:de:3c:64:26:d2:e6:d1:ba:e1:72:f7:c1:
26:4d:56:a2:39:b6:08:38:72:a1:bb:bb:49:dc:fe:
05:28:cd:b4:8b:80:93:a9:bb:e5:ca:dc:23:d1:e0:
6f:25:97:98:af:c1:29:45:83:c6:f7:b8:82:e9:e6:
2f:ce:92:78:40:1b:0c:6c:7e:c4:40:25:9d:4e:11:
90:31:e0:f7:9b:62:51:ee:88:c9:5c:05:fd:3c:58:
34:a7:36:b5:c2:f3:95:05:9f:41:4f:3b:78:7b:b2:
43:c2:31:2c:11:74:f0:ed:90:5e:05:d1:83:fa:17:
09:be:50:e6:d3:c1:4c:9f:fe:56:5a:c3:2b:c9:8d:
1d:2d:f7:9e:90:99:e8:dd:3e:41:b7:4d:d2:c3:73:
50:c4:ae:8c:20:22:e2:c0:bb:f6:1e:fa:4a:f7:f9:
81:27:c7:8c:4b:f8:a9:4a:db:28:dc:25:c4:46:60:
6a:db:61:b5:f7:66:f9:7b:1d:de:85:f1:07:fc:9e:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:E8:5D:A8:A2:F1:66:05:54:8A:96:C7:D7:62:51:3C:FC:D5:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl
X509v3 Authority Key Identifier:
keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:a6c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:24:70:d5:b1:cf:15:bf:bb:0b:45:8d:23:01:91:f6:3d:51:
26:56:1c:4f:9e:ef:9f:5f:35:84:20:83:3b:36:e2:91:54:cc:
b4:70:07:8c:81:a6:9e:46:8c:52:54:a8:c6:ea:70:94:c0:a3:
52:15:67:27:57:59:52:97:a7:a4:77:f8:f2:c3:fc:bc:67:86:
1f:cc:47:a0:00:9f:52:7c:21:83:96:21:c1:4f:15:a7:67:3c:
54:c5:04:ca:c7:00:50:0e:12:86:d8:84:49:37:76:1b:fc:77:
ee:af:97:2c:82:3b:cb:ec:87:48:07:a9:69:0e:17:69:37:48:
43:f0:be:9a:3d:68:71:f8:08:07:e0:34:36:fb:d8:a9:42:fb:
9d:a2:16:f9:fa:31:93:37:dd:44:6e:17:b9:67:e5:c9:84:a0:
e9:ef:1c:dd:2f:55:3c:b8:f1:09:f4:5f:4e:bf:9f:b9:08:de:
c6:4c:97:3c:9f:61:2b:bf:96:23:2c:26:ca:44:df:63:b5:a3:
28:c3:aa:44:93:04:82:b4:45:0c:a4:9e:0b:96:fc:0a:52:e2:
bf:0f:93:dc:11:ff:f0:bd:e6:6a:8f:92:ba:5b:71:04:f8:13:
d1:09:b8:71:ed:14:30:53:c5:ca:6e:84:d9:bc:47:04:b0:30:
9b:f7:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:33:52 2026 by rpki-client