
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa
File: 24578be5-a20e-38c7-ae02-b5e91a957be8.roa (raw, json)
Hash identifier: tlcMiNTzCpPldeZx6CHYYoMh8TJQ6z92V0tP7LeTP6k=
Subject key identifier: 2E:51:F6:45:54:72:15:6E:B8:C3:CD:83:87:9D:CF:9A:38:52:D5:8E
Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial: 010D0C9F4328584D305B51C4FDE2A9ABC49879C0
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa
Signing time: Mon 16 Mar 2026 15:44:22 +0000
ROA not before: Mon 16 Mar 2026 15:44:22 +0000
ROA not after: Sun 14 Jun 2026 15:44:22 +0000
asID: 32806
IP address blocks: 2604:9900:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:5b:51:c4:fd:e2:a9:ab:c4:98:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Validity
Not Before: Mar 16 15:44:22 2026 GMT
Not After : Jun 14 15:44:22 2026 GMT
Subject: CN=bc31df93-5a45-46c0-a75f-0ba7aef4f3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:09:08:a6:b2:fa:cf:b8:e3:b2:cf:50:d6:
00:57:d2:f9:2b:9b:a3:fd:95:26:c3:03:d7:36:2e:
02:34:13:e8:b1:6d:65:c9:70:26:a7:7d:6d:84:5c:
62:3e:4f:df:40:43:45:16:3c:95:3a:86:7f:fa:cd:
4c:6b:2f:ff:52:a8:c3:27:9c:a9:ca:0b:9d:43:02:
92:11:1a:11:17:2a:f6:2c:bb:6b:21:26:f1:76:ba:
f1:94:77:82:cb:44:33:30:05:91:50:37:d1:25:b5:
9d:18:b0:96:dc:f4:7b:29:0b:b4:32:49:da:1a:1d:
a8:25:16:9d:ed:ce:19:fa:0a:8b:76:fa:ef:91:33:
86:37:28:7c:5c:f9:a7:d5:1c:7c:ea:1e:d3:64:08:
f6:75:8b:3b:9b:05:6b:71:40:11:5a:62:b3:7a:20:
88:39:10:3b:6d:81:33:8e:cc:84:f5:0a:a5:8a:ac:
c2:c6:f0:84:60:27:30:15:55:ad:dd:af:2b:05:d4:
fc:42:ca:15:b8:89:5e:77:c9:97:86:88:17:f7:6a:
23:50:e0:1f:ba:64:83:c4:8e:4e:36:0c:63:6a:b0:
78:b0:bd:62:9e:a0:64:47:6f:f3:63:cc:05:aa:f5:
ae:76:5a:ba:0c:25:d4:ff:5c:56:f5:3e:e2:3a:7a:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:F6:45:54:72:15:6E:B8:C3:CD:83:87:9D:CF:9A:38:52:D5:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
X509v3 Authority Key Identifier:
keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:9900:c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:3f:9f:6d:03:63:7f:a0:a5:22:eb:bd:94:89:06:aa:16:3a:
52:8b:36:19:2d:d2:c3:51:46:03:02:08:00:cd:73:74:ad:dd:
03:2b:3c:dd:ca:af:36:9d:47:48:97:98:0a:0b:ea:a9:24:c4:
7e:5a:9d:e8:89:f9:a1:b4:4b:c0:57:92:c4:0c:be:fa:45:7f:
a5:6f:07:b1:09:02:77:28:c5:d8:ae:67:d6:d7:de:18:24:75:
36:3f:a0:19:d2:bf:a5:46:01:62:5d:e6:26:6f:dc:21:92:50:
c6:2b:d1:bc:85:70:67:93:e7:e3:fb:f4:df:9d:82:95:5c:56:
8c:51:a0:f4:2d:7b:4e:ab:42:e3:94:ce:21:55:8e:92:72:bd:
b7:12:ba:7e:13:cf:bd:13:b2:92:ce:b5:75:f5:59:4f:0f:e7:
1b:ed:a0:bf:01:2b:e6:4f:c4:4e:12:ed:54:83:bc:fa:86:68:
7c:a6:2e:d1:c5:14:a2:44:43:48:b8:56:1e:a6:2d:77:93:4b:
12:2e:08:10:a6:01:08:b6:32:62:a5:3a:5a:53:fd:3c:d3:aa:
e8:0c:d6:4d:d7:c7:5f:ec:77:22:2b:c5:1a:94:ba:0a:68:b1:
f8:7a:f1:51:63:6b:37:86:0d:06:df:f3:44:48:fd:af:de:31:
1b:3f:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 08:30:24 2026 by rpki-client