
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa
File: f68c6d33-6e51-3d66-8664-13a4890962a6.roa (raw, json)
Hash identifier: aDgP8BshhJgvq3Hic7hAOs5pBRjQb2lzsa9+RKzI8wQ=
Subject key identifier: 66:A1:A9:57:16:F9:8F:FD:21:E3:34:F0:6E:D1:6E:8C:6E:93:23:A6
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584D55BA447FE1A2707AE1B82B00
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 31898
IP address blocks: 2602:fdaa:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:44:7f:e1:a2:70:7a:e1:b8:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=9a525f40-18c0-42f4-b4ff-eb01220197e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:1b:b2:07:bf:b7:b2:a2:de:1f:3b:27:9f:
20:ca:12:73:34:14:1c:16:34:b9:32:8d:b5:05:cd:
39:99:95:90:c4:ed:80:70:98:14:cd:cf:00:c1:e0:
1f:42:a1:9e:04:01:19:82:52:bd:0f:87:58:f7:f9:
3f:2e:ae:e7:e6:ad:17:e4:21:ef:6e:81:34:d7:57:
38:60:86:9b:04:8a:95:31:92:86:03:23:43:2f:a3:
a3:67:48:2a:52:8e:8a:b7:0c:72:f2:2a:12:c3:c3:
2e:d3:f8:fb:a6:7b:3a:65:47:58:99:e7:b6:14:49:
a8:b0:42:a0:0e:73:44:e7:de:c5:ff:27:b7:97:82:
e3:a1:4f:aa:f3:0c:6f:cd:90:f7:56:1b:b0:98:c8:
41:e1:f7:f2:32:80:4d:38:98:02:23:75:01:04:6d:
2e:91:d2:85:ab:47:ea:e7:bb:56:ad:4f:c8:f8:ed:
21:20:3a:3a:4e:27:a4:3c:20:ff:b4:b9:1d:49:69:
11:c4:f9:84:be:53:0c:7e:18:e6:ef:88:1c:28:64:
bf:b3:88:81:29:87:93:15:df:47:ec:f7:95:61:26:
a0:90:fb:e7:73:88:e3:31:ae:ae:1a:80:72:9d:d2:
57:80:66:73:4c:96:f4:7d:00:f0:b4:20:c1:86:70:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:A9:57:16:F9:8F:FD:21:E3:34:F0:6E:D1:6E:8C:6E:93:23:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa:31::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:74:86:e4:40:40:f7:19:71:d2:61:bf:fa:e7:96:51:cb:9f:
ec:ca:e0:4e:77:b0:a8:c5:fb:9d:1e:35:bd:68:51:f1:07:91:
e8:dc:dc:c1:67:f4:a6:f2:62:9d:10:68:31:39:0c:b4:97:72:
ca:93:37:4a:f8:a0:30:30:56:32:ca:aa:24:6f:e8:08:38:f9:
98:00:55:eb:a0:a1:47:74:82:d5:45:3a:70:52:cb:56:c1:f5:
20:05:b6:92:6c:f1:4f:4a:7a:6e:3f:ad:bc:a8:0d:6d:3e:a0:
e2:e6:3f:1b:9c:a4:96:e6:7a:d6:8e:dd:ec:36:3d:a9:72:69:
6b:cb:aa:d7:9e:c2:a4:01:ba:e8:ca:cf:51:a9:96:8e:0f:e9:
0d:0d:a4:a8:0f:18:32:b8:dd:d3:8f:c4:ed:64:35:a8:a3:f3:
ca:b4:52:17:ec:99:df:ee:0b:3c:e5:04:db:43:2c:70:af:91:
95:f9:01:6f:eb:a1:bd:25:dc:ab:cf:17:87:6b:89:37:0c:4b:
cd:b1:a4:1b:64:43:be:6e:2d:a4:5c:31:3c:64:bd:58:ac:4c:
eb:5f:5e:10:4e:0b:2b:21:c3:5e:1e:3f:a2:ac:be:fd:26:c9:
35:84:fb:77:48:d4:96:06:91:1c:2d:2f:78:e8:18:51:d7:c1:
44:b5:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:39:39 2026 by rpki-client