
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa
File: cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa (raw, json)
Hash identifier: WkOjevJV4/yNNph0eZjJ+3ZAGNxhalp6GCQgVbhK1aI=
Subject key identifier: 7F:68:34:01:65:A8:11:49:46:DE:42:B1:F9:8C:55:F9:54:B0:B4:C4
Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial: 010D0C9F4328584D571FA21CA9486D4D83871200
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 20278
IP address blocks: 2602:ffc8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:a2:1c:a9:48:6d:4d:83:87:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=4e1323b8-d081-46eb-9e6e-9e900784a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:ff:58:aa:8e:89:99:25:3a:41:4a:e7:8c:
32:07:23:68:cc:f2:2a:db:fc:87:b5:8f:4d:a0:a4:
d9:45:6a:13:12:1b:e3:44:ea:83:cf:f0:98:87:85:
c5:ce:a7:b2:af:2d:ef:e8:d5:7d:a8:73:7a:4a:a5:
81:44:c8:c5:35:e1:38:5d:40:67:22:47:f3:3a:7b:
8a:52:78:ad:88:34:8a:56:02:89:1d:95:28:ff:e5:
f3:6b:d8:a0:3e:5c:cf:d9:81:d7:fd:51:23:0d:97:
5c:ac:dc:fb:1f:f7:92:25:a5:0b:1d:55:22:2a:96:
44:1b:72:0a:b9:7e:59:40:99:69:24:a2:d1:cb:7c:
2a:3b:85:23:3b:4f:61:7f:8d:ce:cb:7c:31:f7:50:
58:ae:8e:e5:eb:d7:46:84:87:1b:56:3c:fa:be:7f:
0e:6f:8a:87:6c:b0:a9:a9:45:45:f1:b2:0e:26:2a:
29:ba:fd:ac:f6:98:f9:fb:30:1f:bb:c1:14:99:ef:
12:74:42:82:aa:30:6e:d3:69:d1:60:b9:5e:09:10:
7f:3f:bc:e4:e6:36:73:29:40:ff:1e:e6:33:f3:a9:
92:ff:3f:0d:76:8b:2f:03:26:8d:f3:e7:84:65:4a:
eb:65:10:8b:54:06:10:06:a4:c8:37:7e:af:6f:2a:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:34:01:65:A8:11:49:46:DE:42:B1:F9:8C:55:F9:54:B0:B4:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
X509v3 Authority Key Identifier:
keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffc8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ac:9d:14:e5:9d:6f:13:dd:74:19:04:9f:cd:51:9d:22:f9:
73:ef:b5:25:fa:79:ff:25:4f:6e:ac:82:3c:c4:4e:22:2c:29:
90:f9:39:0d:05:2a:f1:08:c3:83:1a:92:e2:cd:74:86:f4:59:
34:f3:d9:b0:98:b2:36:d7:6a:67:6f:68:62:5a:c3:88:a6:cb:
59:ef:dd:f1:f7:68:f8:65:57:76:dd:51:e8:ea:4a:d1:f9:bf:
3e:6d:f4:51:fe:68:bb:0e:af:98:cd:07:b3:ec:ae:3e:f0:ff:
7a:7a:f3:70:6f:74:60:52:75:96:1c:a9:d5:a3:c9:88:82:e2:
69:10:99:5d:ec:68:b8:a9:0e:17:62:2b:6e:b1:41:42:74:85:
84:4d:60:52:27:5e:74:83:45:b5:fd:03:80:b5:83:da:c8:10:
b9:5c:eb:c2:42:6f:bf:ea:31:a6:27:ec:89:f3:ef:e1:03:f2:
3d:07:32:cc:53:bb:d0:bc:9e:ff:57:99:4d:4b:2e:f8:60:72:
28:4d:b1:65:fe:86:da:10:59:3d:52:3a:60:7b:cf:3d:3c:06:
0e:bf:85:2a:09:57:4b:0e:8b:1f:45:e5:d0:7e:ae:bc:fa:fe:
e7:6a:88:a8:a5:85:e1:36:8b:fd:b4:39:8a:83:68:08:40:92:
80:af:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:31:07 2026 by rpki-client