
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
File: f8cef0a4-a68f-347b-bee6-17972ce290a9.roa (raw, json)
Hash identifier: hNSN1+hxmnkXkd3VG//90sBsIyI65B/5b1a18wV0eV8=
Subject key identifier: EF:6B:0C:1F:24:10:4B:3E:4B:34:6B:D2:5E:69:A8:15:01:CE:33:A6
Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial: 010D0C9F4328584D1172659B7151CBA1507749C0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 3477
IP address blocks: 2602:810:d000::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:65:9b:71:51:cb:a1:50:77:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=bd879d3f-8ab4-4f2b-9c34-54572cf8dd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:ea:5e:72:52:b5:99:2a:a3:41:ab:80:ee:
66:a3:e3:2d:09:b4:43:99:24:14:ee:52:9d:ce:c9:
7f:ba:64:05:01:29:ed:85:3b:af:26:05:a0:e2:a3:
aa:f8:ba:43:a0:0a:a7:23:aa:df:cb:06:0f:b7:66:
7d:41:36:5e:6e:8c:9d:50:4e:b2:e0:35:7c:db:de:
37:0e:58:4f:80:3b:dd:0e:18:c6:7b:d5:66:33:c8:
c8:e1:90:2a:b8:64:eb:fd:58:e9:66:20:3f:c9:53:
9a:a4:aa:d3:73:11:df:a6:68:a5:ce:ec:de:f5:0b:
8c:35:46:ce:1a:df:4f:5a:ef:87:47:59:9a:71:91:
f1:f7:81:81:b9:52:45:ff:ec:2e:a7:6b:98:1b:94:
65:01:89:68:9e:db:d3:e2:8b:50:bc:fd:aa:16:55:
ff:6d:da:53:ae:10:42:2b:b6:2a:7a:6b:3f:24:10:
d3:40:29:c4:b8:09:a7:4f:5c:05:f8:ab:a9:66:ca:
c8:ca:36:58:a8:3f:01:15:f1:07:5f:43:ae:5e:cc:
97:cf:47:b7:d2:4e:1e:fb:cf:cd:ab:96:41:b8:7c:
e2:24:6b:db:be:41:1d:27:64:0f:e8:d3:bc:bc:34:
08:73:ef:1d:d5:66:28:19:17:a7:63:8f:8c:fa:28:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:0C:1F:24:10:4B:3E:4B:34:6B:D2:5E:69:A8:15:01:CE:33:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
X509v3 Authority Key Identifier:
keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:810:d000::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f0:58:ca:85:5b:37:c5:40:60:bb:f2:69:f7:24:ac:93:18:
0d:1d:c5:e1:e0:b5:fa:7e:72:72:8f:ce:e1:71:b8:9e:b8:87:
5b:e9:98:97:d1:91:22:4f:63:09:40:d6:53:91:3a:5f:02:0b:
3e:4d:dc:17:50:8e:a3:2a:89:e9:a0:46:01:b7:a3:0e:b6:c0:
87:e4:a8:34:ea:3a:aa:70:c7:69:cb:e7:61:5f:4c:33:b7:f6:
8a:0e:2a:c8:76:15:33:f9:58:d4:1f:e9:4f:56:c5:43:90:03:
c8:78:bb:c4:ed:d8:59:7f:54:fa:7f:ad:c4:6b:38:f1:5e:65:
8f:8d:67:b1:42:03:9a:f3:a9:75:b2:4d:31:e2:d9:cc:71:37:
af:e6:c5:d6:92:d5:77:75:06:a7:a5:9b:00:55:61:c3:e8:81:
9b:42:65:a6:9d:2b:c8:3b:50:fc:4d:a1:bf:9b:e8:c5:b4:6b:
3e:f2:49:e6:bf:46:02:41:3c:3a:aa:9e:54:a9:42:da:96:3e:
bf:e1:43:65:e6:81:ae:07:73:08:d9:2b:ad:57:1d:b9:5b:0e:
d5:ed:0c:7f:2e:49:f4:94:6e:f4:b6:42:b6:19:23:00:0a:09:
11:0b:21:56:25:55:94:5f:29:b2:91:af:b5:29:13:cb:5b:ae:
5c:29:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:12:08 2026 by rpki-client