
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa
File: 998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa (raw, json)
Hash identifier: c6SORshpuE1q4zscI13J6HsghoeNcJ7TSV5ylSjzsvs=
Subject key identifier: 62:D5:04:FD:5D:BE:79:E8:05:34:73:A5:F0:C4:09:F7:6B:8B:E0:A0
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584D571FB6B26F904D788873B780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 60781
IP address blocks: 2607:f5b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:b6:b2:6f:90:4d:78:88:73:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=462bd242-7e32-46ca-8c3d-95773b8825fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:0b:28:28:94:7f:86:cf:ac:44:d2:de:ab:
db:b0:fd:9e:94:c6:d4:da:fc:49:de:c8:23:59:21:
9a:7f:70:42:05:d0:00:b9:7c:54:d0:62:8c:03:5b:
24:84:66:81:91:14:b7:5c:e4:60:ec:ff:e8:49:52:
d1:bd:55:9f:e3:e6:11:3e:d6:79:cf:c4:80:3b:47:
1b:ed:3d:0d:10:2c:ab:03:60:ec:97:b2:b0:a0:90:
6a:30:c7:8c:b9:bb:80:b9:36:fc:4a:d5:dd:09:83:
9c:54:ed:2c:00:43:a7:a3:5e:d4:05:3d:39:4a:55:
a7:ea:b1:d5:99:44:be:fb:79:74:4e:b5:d6:fc:4c:
c6:86:e5:fe:c3:6d:94:5e:4f:ba:6a:e0:eb:72:bb:
ac:48:2b:38:47:7e:f4:f3:96:10:42:b1:35:9b:8c:
81:9a:69:12:3d:c3:2e:45:52:64:36:f5:4e:34:52:
18:3b:82:0d:90:ef:58:6d:62:a4:e9:a1:eb:78:b3:
27:10:b0:41:f0:9f:bb:0a:96:67:3b:49:12:8c:60:
86:08:bb:2a:25:43:f7:de:6a:3f:6f:8c:ba:57:3f:
87:c0:7f:f7:61:7e:d1:df:3d:28:e3:59:c5:66:35:
0e:74:dd:23:2f:7b:a6:30:54:55:19:21:56:ee:f6:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:04:FD:5D:BE:79:E8:05:34:73:A5:F0:C4:09:F7:6B:8B:E0:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f5b5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:51:5f:86:76:6f:54:46:26:55:ce:fe:2e:e6:d3:26:8a:30:
71:30:bb:e0:4f:3d:05:94:78:49:64:2f:ad:f3:48:72:d2:e6:
0b:78:0b:0c:35:d8:82:be:bb:61:63:af:c2:0c:30:4e:5e:20:
b9:2f:31:73:aa:d4:9b:ea:54:e8:ce:f9:39:22:ea:5b:20:18:
cc:e1:fa:5d:08:f4:7c:8b:26:d1:56:19:45:a1:c2:b4:dd:28:
40:63:4d:22:57:e8:e8:25:58:10:dc:15:34:ce:d8:3a:d2:9e:
31:d3:e8:c7:dc:9c:31:24:58:cf:be:58:9d:c5:0e:1c:ef:b4:
f9:3f:0b:15:13:13:78:d6:f1:0f:f7:ae:4b:7a:32:f3:c6:48:
45:c0:cf:f9:a9:c4:ee:b5:6c:27:d5:32:d7:50:af:6e:b5:6b:
83:51:6e:dd:c1:42:5e:66:5e:c1:2c:32:37:9f:c1:03:db:e9:
03:f5:5b:c6:d5:1e:78:34:73:1b:30:5f:b6:4b:6a:f1:8d:04:
49:90:8e:eb:66:e8:96:bd:06:f5:b0:52:e1:c6:63:88:e9:52:
e9:46:38:45:2c:f4:e5:aa:17:c2:43:d4:5f:83:9b:cc:26:7c:
27:c4:23:f5:9b:dc:16:3a:bd:e2:0e:4f:4a:f2:df:c2:2d:e9:
fc:a1:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:32:43 2026 by rpki-client