
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
File: 289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa (raw, json)
Hash identifier: TUDHEHUhEG18fzujImTEatZL4LuOAT65Ap7Sle1NkTc=
Subject key identifier: 21:18:3B:78:64:5D:62:BE:2B:4A:25:E2:52:D6:75:00:0A:A0:D9:72
Certificate issuer: /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial: 010D0C9F4328584D91BFF95D5148BDDCB5E162B8
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 20148
IP address blocks: 2001:5c8:f7fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:bf:f9:5d:51:48:bd:dc:b5:e1:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=637814ae-0b0e-4447-9f82-5aabb8e616e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:98:6b:dd:51:e8:6e:a4:05:cb:f6:ce:87:
63:a4:95:0d:ce:c0:c5:22:ef:58:a9:ae:0c:24:2a:
79:b8:f3:43:df:4f:36:d9:e8:47:b7:b0:36:53:9c:
6d:5e:24:9c:7c:aa:21:85:ce:1d:99:19:df:d6:73:
2d:d1:31:99:a3:9a:ac:c5:18:50:d7:04:99:d1:87:
d5:89:4e:a8:97:4b:d8:43:fd:1e:e4:26:dc:49:2a:
db:51:62:e4:8d:ba:98:93:2b:97:4c:df:33:94:a8:
67:35:8a:7e:06:f8:8f:ef:03:73:0e:12:53:dc:9c:
71:39:2a:d3:ce:05:86:5a:23:9c:ab:80:c6:97:4d:
f2:23:93:c4:26:94:8c:8d:ab:51:df:af:ef:83:75:
20:7f:87:ab:2c:b4:ef:e8:8a:ec:6d:9b:4d:e1:6d:
14:46:5a:58:79:e0:4a:0a:e8:53:40:33:df:f8:a6:
65:a7:af:3f:04:97:19:b2:57:bd:4e:fe:35:c5:54:
d2:31:fe:64:b7:64:9e:5b:f9:e2:43:2a:13:7b:02:
2e:38:cd:3e:ad:6e:bc:2e:ee:e0:16:fa:66:b8:7c:
23:f3:bf:9c:74:f0:dd:7f:0b:85:de:da:f5:6e:c7:
7f:ee:a5:35:ae:bf:03:4d:ff:0e:9f:f5:46:3e:fc:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:3B:78:64:5D:62:BE:2B:4A:25:E2:52:D6:75:00:0A:A0:D9:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
X509v3 Authority Key Identifier:
keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5c8:f7fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d3:0d:71:4d:09:3f:6d:69:2d:62:83:49:42:85:b7:b2:47:
8d:5d:79:2f:94:65:32:06:75:d9:22:80:db:8d:72:08:c3:6f:
f4:b1:5d:fe:b7:70:6c:ca:13:0c:e6:31:ec:be:41:fd:86:3f:
77:cc:e6:8b:aa:e1:2f:90:4f:ca:15:39:3c:96:32:ac:f6:2e:
cf:ab:db:e3:17:e0:a5:72:19:02:b8:e0:6b:d9:d3:ab:7d:4c:
45:53:68:40:a5:ba:d1:b9:d9:d6:4f:2e:1e:ee:24:75:ef:26:
cb:57:82:19:06:99:89:02:f4:5b:ff:08:e9:d4:c8:9b:08:04:
ff:d7:ec:84:ae:6f:cf:54:c9:9b:1a:c7:14:02:79:f9:e7:40:
12:b7:70:7e:72:e0:e2:d8:0c:f8:89:80:5c:53:9e:8c:b8:ec:
25:5e:9f:f0:c3:9c:6d:a3:80:a0:b9:04:71:7c:83:df:b0:7a:
c0:7a:1f:73:9b:b2:9c:2d:a6:fb:4b:bd:ea:5d:c6:84:0f:4e:
cc:d2:c5:8a:3e:c6:87:3d:67:20:85:38:3a:ad:41:1d:c4:93:
f2:55:44:31:d4:ca:01:30:8a:ec:df:bc:9e:56:8e:7c:41:0b:
83:28:0f:32:b0:2c:55:53:c0:6e:66:3d:f6:2e:07:24:0f:b6:
f2:d5:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:10 2026 by rpki-client