
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/4f086b81-49e5-37ba-8b39-b5c5617a0002.roa
File: 4f086b81-49e5-37ba-8b39-b5c5617a0002.roa (raw, json)
Hash identifier: yXIlnLNo75SFHLEe7i8qQYeNO2N+0nPf3Ai8iZt0+QI=
Subject key identifier: 6A:7E:7F:02:FF:92:CC:25:E3:3F:E4:82:13:AE:79:6D:CF:A5:C5:55
Certificate issuer: /CN=0a445fc9-d70d-4b9e-8d68-26857b19ae7a
Certificate serial: 010D0C9F4328584D7A0551912DA45C97647C3580
Authority key identifier: 56:D2:2B:6F:E8:9F:0A:CB:84:1B:26:B1:19:E3:FD:80:03:AE:E0:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/4f086b81-49e5-37ba-8b39-b5c5617a0002.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 2731
IP address blocks: 2606:7c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:51:91:2d:a4:5c:97:64:7c:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a445fc9-d70d-4b9e-8d68-26857b19ae7a
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=663c3ed5-0147-408f-ba36-74bb405444a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:76:86:11:80:43:06:0c:3d:18:bb:a1:56:
7e:03:b3:2b:2f:b5:8b:f0:7e:57:65:6e:64:3c:5f:
ca:59:cd:f7:e0:3b:73:40:a9:19:66:54:15:2d:b5:
6d:78:0b:fe:c4:7c:62:69:92:6f:f0:77:09:de:91:
d0:8b:0c:6f:20:69:e0:37:c2:2c:fc:a7:99:49:8d:
b4:64:c5:b2:1e:84:4f:4c:6e:02:b3:99:a4:f8:34:
24:88:36:dd:0d:3b:97:79:28:e8:14:25:0c:e5:d0:
87:13:34:17:6e:12:5e:19:c5:71:33:63:dd:61:b0:
d1:c5:9c:ff:5c:bc:eb:40:49:c6:8b:84:53:30:05:
b4:e1:62:5f:1c:74:34:97:fd:34:91:4b:c4:1f:5e:
65:1e:9e:2f:11:2f:e5:80:02:d1:e0:d1:43:6d:fb:
4d:e5:0a:49:e1:61:89:cf:6b:ce:72:04:2b:0b:d0:
d9:25:11:4c:c5:f5:74:8c:d1:26:73:39:4d:b3:c1:
36:4a:e9:71:66:0f:ef:aa:85:75:f9:0c:9a:ef:c9:
85:83:f2:c3:9b:09:29:65:6b:b4:f2:2a:49:65:5d:
6a:cc:94:07:81:a1:03:59:11:32:c9:28:f5:43:3e:
81:04:e6:fb:de:31:9e:85:d7:0f:1d:10:2a:05:10:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:7F:02:FF:92:CC:25:E3:3F:E4:82:13:AE:79:6D:CF:A5:C5:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/4f086b81-49e5-37ba-8b39-b5c5617a0002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.crl
X509v3 Authority Key Identifier:
keyid:56:D2:2B:6F:E8:9F:0A:CB:84:1B:26:B1:19:E3:FD:80:03:AE:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:54:e3:e9:5e:91:91:68:5e:12:7a:8d:eb:5e:9f:f3:27:08:
e4:f0:65:9d:99:25:ab:b5:6f:d7:f1:60:3c:28:a1:fd:68:61:
b6:e9:a6:6b:3d:6a:7d:e7:c8:e7:e5:c6:15:2b:a1:df:20:14:
78:45:84:ea:4d:df:ad:eb:66:73:5c:02:81:55:e9:9c:9e:9f:
c6:99:ba:5f:72:66:47:78:37:3f:f4:a2:8f:cf:a5:40:31:84:
d4:9d:f1:c8:9c:45:72:d4:35:1e:7e:a1:07:f0:3f:17:7e:91:
a6:1e:af:a5:a6:e0:0d:36:40:c9:f5:7a:60:7d:f2:2b:dc:ee:
44:0f:64:79:a0:5d:f6:aa:6f:62:41:ea:fe:e2:a4:b0:88:9a:
7f:51:cd:3c:e4:c3:f7:7a:de:79:29:84:10:98:51:1a:9f:fb:
53:d8:68:56:f9:05:fc:42:52:24:f6:bf:8d:91:6c:72:72:85:
85:6e:bb:2e:87:fc:03:4d:67:a3:ca:3c:b4:e3:bb:29:9a:ab:
2f:d1:76:48:ce:bc:57:b2:ed:01:23:74:f0:f0:da:ee:23:b7:
f6:3e:d3:4d:dc:3e:87:87:de:b8:8a:e7:ee:81:83:22:d8:3a:
7d:06:40:73:e7:59:0f:02:f5:dd:7f:bc:5d:c2:f6:b2:21:f4:
2a:8f:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:32:06 2026 by rpki-client