
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa
File: ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa (raw, json)
Hash identifier: 0Lw+ne0dloHGY8mtNow79j7EVQhSp18mlA49tnuMYrg=
Subject key identifier: E8:92:37:BF:79:78:F1:94:49:66:80:F4:3A:68:F2:80:50:DD:04:41
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F4328584D1B1A1A1149BA7FDDB4CE6C00
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 198949
IP address blocks: 2607:f460::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:1a:11:49:ba:7f:dd:b4:ce:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=245f3c5a-4dd7-43c0-beb8-6a1780eea75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:e3:9a:53:a2:3c:6d:c2:dd:f6:22:79:80:
6d:e1:a1:23:5a:36:dc:1e:9e:75:c1:83:4a:01:95:
71:f0:97:96:a6:05:86:e6:58:28:b7:e1:86:ac:94:
e5:22:01:68:6e:8a:60:77:93:d7:9a:2f:33:15:fd:
d6:dc:30:d2:e4:45:77:97:9c:ff:ab:15:72:85:f8:
b0:82:64:0c:49:31:60:f8:95:0a:fc:0f:20:36:99:
42:7a:49:19:1d:02:1f:45:70:77:da:bc:a9:67:0c:
22:b1:73:73:79:7a:f3:60:e5:6e:c6:fc:52:5f:d5:
8b:ec:31:56:cc:27:dd:ca:1c:13:5e:50:c1:da:77:
29:eb:04:ec:0a:33:2e:5d:27:71:bd:5b:5b:a8:0a:
fb:bd:b8:1b:e7:8b:d8:73:2c:0d:db:8a:14:ee:77:
a6:e4:67:ab:c1:57:06:fd:7b:c5:f1:37:c9:13:ca:
c2:45:4e:e0:75:d5:65:d8:0a:97:66:d9:7e:04:31:
57:ad:e8:7b:99:be:1a:ae:aa:37:dc:75:b7:0f:19:
42:42:1f:8a:75:39:0c:cf:51:e4:e4:da:d5:91:b8:
13:94:16:db:fc:af:36:ff:21:f9:c0:9f:9b:ca:9c:
50:ef:c5:de:7f:94:0a:29:c9:58:b2:a8:28:2b:a9:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:37:BF:79:78:F1:94:49:66:80:F4:3A:68:F2:80:50:DD:04:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f460::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3b:22:d9:21:75:fe:ad:1b:10:c4:96:6a:c5:ef:d8:fe:3b:
c5:47:7f:b4:a1:04:17:ac:c2:1d:f4:f7:12:44:d1:ed:c3:ca:
a3:13:91:01:32:89:eb:2d:5c:b0:63:6c:bd:42:b4:e6:3c:ea:
7d:29:ec:66:64:23:93:43:45:08:51:f2:bd:ff:ce:41:bb:a4:
1c:97:47:50:58:97:49:c3:9d:e2:40:21:ae:10:ad:21:28:c5:
13:b0:9d:30:85:13:69:04:b6:bb:99:c8:d9:4b:29:3b:82:a2:
9d:b1:fc:10:1b:e5:84:97:1a:2b:09:e2:03:52:dd:ae:20:e2:
ed:ce:e9:df:a6:42:14:c2:86:c6:8d:92:69:8c:bb:ea:bf:70:
28:83:8a:bb:97:4d:05:2d:60:c2:ce:52:e5:8f:26:45:b4:04:
bb:78:3c:b8:c8:df:00:62:e0:49:81:6e:7f:cd:19:55:cc:5d:
98:8b:2b:b0:5c:09:74:2a:e2:ad:1e:89:51:45:2e:a2:cb:16:
ae:19:f7:1f:b5:a7:d2:8d:13:42:b1:15:bb:dc:32:84:2c:49:
b4:59:38:64:9c:6d:b5:f5:d8:bd:90:86:28:f4:d4:34:2a:57:
88:d4:e1:ef:73:13:08:8d:c8:28:92:2e:49:e1:fa:8e:b6:23:
75:03:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 03:35:47 2026 by rpki-client