
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa
File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json)
Hash identifier: HIzOAI22B+fYjx4QsA75QPQWZHebXf43UgmcwCgjo/w=
Subject key identifier: EF:B3:4F:98:FE:58:FD:79:BB:C6:7B:9D:17:2D:9C:A7:40:F2:8E:0D
Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial: 010D0C9F4328584D91C0170090FAEF7C6C9EC010
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 4226
IP address blocks: 2604:f586::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:17:00:90:fa:ef:7c:6c:9e:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=58a82a1e-f6f6-47e9-80fd-bf217800286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:00:c2:0a:ea:18:b7:43:1b:19:41:66:ad:
40:35:5d:a0:f7:ec:7e:6d:90:28:91:05:7d:a9:a6:
27:04:2a:9a:b6:89:cb:7f:07:bb:4a:bb:79:72:f2:
2e:ad:54:0e:14:f3:cb:f3:7c:ce:e0:4b:0d:7d:f8:
4b:31:f3:f4:bf:87:68:c4:af:d9:87:5b:ef:12:66:
9d:15:b7:32:84:43:aa:04:a4:9b:7f:f4:09:27:6a:
4a:4b:f9:8a:a3:e1:94:4c:78:8f:33:3b:be:aa:be:
3e:18:46:9c:6c:82:89:ef:e5:14:3c:a4:b4:81:75:
de:c2:0c:b9:88:18:fd:b8:f3:01:a1:fd:b2:91:6d:
3a:57:5e:aa:5e:a5:fd:b7:70:a5:3e:7a:ec:51:04:
fe:3e:c3:c1:50:e1:f0:2f:62:29:8a:31:62:10:94:
2d:0e:56:46:58:0f:89:2d:03:91:d6:44:94:58:6f:
82:97:41:9d:86:1a:5a:0c:b6:74:ef:7c:7d:dd:60:
8b:97:05:e4:46:73:96:60:19:de:d4:97:88:c0:0d:
2b:7d:6b:8c:9f:8e:86:21:ac:8f:ae:de:53:17:e9:
da:8e:1e:23:10:96:6a:96:c6:8e:72:bd:ed:cf:85:
a9:ad:63:df:21:54:d0:22:f4:04:41:64:4a:e0:45:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:4F:98:FE:58:FD:79:BB:C6:7B:9D:17:2D:9C:A7:40:F2:8E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
X509v3 Authority Key Identifier:
keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f586::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ae:74:d6:f3:64:83:4b:50:3b:aa:07:b3:c2:9b:1e:5c:ee:
76:bb:c6:bc:f2:0d:10:22:74:00:c8:bf:c0:57:f9:8f:dc:11:
6b:32:06:34:ce:40:b4:be:da:65:37:83:76:93:86:82:92:db:
19:c4:24:ec:01:30:df:47:76:c8:13:fb:cf:50:e1:98:d5:a0:
33:35:20:ee:f9:d6:a1:2d:43:ad:7f:47:1c:a6:c6:cd:12:b1:
89:c9:fb:19:8d:62:bd:3d:8c:41:be:e3:ff:2f:a1:94:16:7a:
5a:46:e6:0f:e6:36:b0:83:8a:9e:74:fe:fb:9d:5b:4a:87:2b:
b7:c0:e9:e4:b3:ed:41:43:f6:83:a0:e3:78:58:4a:73:b3:7a:
5b:5c:82:da:77:da:ca:dc:d3:5b:70:61:db:36:98:07:77:6a:
b5:e5:24:2c:d7:64:06:26:f4:3e:d4:75:82:0b:34:7e:a3:67:
41:18:d7:b4:33:fc:29:35:95:ca:7d:ea:77:4a:f6:66:27:1d:
d9:6b:7c:55:eb:cc:91:0b:57:ff:27:fd:f2:0f:68:99:d5:9d:
db:21:75:10:26:90:ab:07:4c:11:29:92:c5:a7:74:bf:92:a1:
e6:f9:a9:da:c4:ae:2b:45:a5:35:cf:44:3d:cf:fd:26:26:27:
95:16:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 08:45:36 2026 by rpki-client