
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/43fd8499-5600-3a60-a50c-6150ad89ec84.roa
File: 43fd8499-5600-3a60-a50c-6150ad89ec84.roa (raw, json)
Hash identifier: 0QMLTdL2GffLKp6OSFRieAnaTsJOifRxpZGD+LZVMNY=
Subject key identifier: E3:A4:AE:87:9C:32:28:FF:3D:79:89:A2:0B:2C:7E:D6:BA:FB:09:E3
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584D2A74C502DDBC32EC3629BC00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/43fd8499-5600-3a60-a50c-6150ad89ec84.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 10255
IP address blocks: 2605:6c00:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:c5:02:dd:bc:32:ec:36:29:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=732ad179-164f-4a0a-ad78-3806bede9f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:ac:78:dd:bd:dc:25:77:00:d5:58:8e:a8:
33:01:62:9e:87:84:9a:0e:77:58:14:ec:bf:84:82:
60:f4:8e:c3:c2:8f:8e:51:18:9e:72:0e:bd:e0:d9:
7f:f5:f2:c3:47:e7:1d:07:31:be:2b:fb:41:52:0b:
0f:d6:f8:df:aa:6f:91:49:ed:1a:25:38:88:a6:23:
cf:f4:e1:68:7f:43:9e:67:c4:3f:a5:5f:92:01:83:
05:62:89:9a:9e:ee:de:10:d7:a4:73:17:e6:07:32:
dd:24:cd:12:07:5e:78:55:4e:8a:bf:5b:16:1f:4b:
8d:02:5b:19:dc:5a:55:f6:69:85:ea:cd:85:fc:73:
57:1c:62:5c:cd:e6:a6:3d:65:e1:ed:72:cf:33:33:
05:96:4f:f5:6a:d2:32:54:7f:93:1d:7f:69:21:cb:
14:93:f1:80:38:50:90:27:a4:0c:29:32:14:24:6e:
7b:77:56:05:8a:4c:25:60:8b:2d:a4:6e:5b:d4:40:
3b:86:54:ff:86:12:b1:75:17:34:fb:6a:3e:86:9e:
d2:4e:6e:74:bd:44:eb:1a:58:68:78:92:7e:91:f2:
ca:45:4e:17:d3:b1:e2:a0:c1:b7:7a:2b:7e:38:15:
cf:3f:30:3b:a7:de:11:90:ca:b1:e0:a6:86:8d:5a:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:AE:87:9C:32:28:FF:3D:79:89:A2:0B:2C:7E:D6:BA:FB:09:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/43fd8499-5600-3a60-a50c-6150ad89ec84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6c00:9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:08:d8:d7:a0:b6:c7:8e:8e:e7:6c:6e:31:0e:67:77:fb:eb:
ba:9f:08:c8:fc:89:7d:df:78:4d:e6:16:5d:c2:0c:91:40:2d:
c6:e5:05:90:5a:52:60:b2:e7:04:62:3b:6e:68:1b:81:ef:54:
f6:1e:22:0b:eb:a0:e8:e4:b1:7f:0c:d2:ba:5c:e4:27:b9:bf:
43:e6:81:f3:33:08:4a:67:92:77:e7:19:08:1a:47:b4:b0:da:
61:1f:4f:22:4b:00:9b:fb:af:e1:7f:db:55:3f:82:12:ec:dd:
94:e0:c0:cf:4d:f6:53:79:8c:27:10:b1:df:c9:9e:19:99:a0:
ec:4f:41:da:70:b9:f5:3f:23:8c:64:5a:a8:72:3d:e9:ae:49:
1f:4a:1d:73:73:18:ea:f9:bb:a7:61:11:65:b0:c0:69:1c:7e:
24:fd:ed:00:22:da:cb:0d:a3:d8:dd:3f:7d:85:2e:fb:82:ab:
19:78:d5:ea:18:92:cb:2f:a3:82:c5:a7:92:1a:34:5e:6d:1a:
9c:fb:97:a0:90:4d:08:69:35:56:7b:a0:9a:5e:75:91:a9:ff:
67:b9:43:d9:e8:71:cc:47:5e:be:99:77:3f:da:1a:f1:8f:aa:
44:83:5e:da:ce:bb:ec:74:7a:f2:3f:70:bf:0a:d6:df:c4:72:
54:ea:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 10:59:12 2026 by rpki-client