
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa
File: 0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa (raw, json)
Hash identifier: BCJuIAckqcHTxkkC1JBvsxcb+uoBMr4ueEpm7jUdqwA=
Subject key identifier: 12:FB:7C:CF:50:A9:EA:AF:71:99:DA:E3:A0:80:F0:2F:50:B4:EB:A6
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F4328584D300A5714A6BB5EAC58D2CD00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 394354
IP address blocks: 2620:10a:8055::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:57:14:a6:bb:5e:ac:58:d2:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=1af2ee9c-acb1-412b-a9f1-98d97acaf4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:b9:94:63:3f:dd:49:77:19:4d:ea:b6:cc:
49:0f:9c:e7:65:ec:1e:49:5e:a5:ab:a0:e8:08:b1:
6c:74:6d:46:08:96:8b:2d:0c:af:c7:0b:ee:f1:75:
fd:9f:2d:3d:09:5f:9d:b4:fa:da:63:ab:c9:ef:91:
44:e7:4e:9d:9c:b9:2d:ed:f1:38:5f:0d:03:a9:05:
c0:fc:ee:fe:f0:c7:d5:cc:0c:d7:58:18:46:0a:18:
6b:2f:c5:a8:ef:e7:e4:55:7b:1f:bc:37:32:0f:f4:
ed:63:77:fc:0f:21:93:c6:92:e9:b8:ac:51:d9:4f:
28:8c:a3:aa:ae:ca:bc:ab:db:30:b4:58:a4:7a:e0:
cd:ca:91:81:6a:ab:e9:6a:ac:85:5b:ea:40:83:ad:
13:ef:d4:d6:33:e2:66:41:c1:5f:f1:8e:7e:f0:52:
a2:38:c4:29:c1:7a:6d:46:35:51:95:18:4b:82:9a:
69:a3:5b:89:8c:ee:51:06:53:de:d5:60:78:4e:30:
67:64:fd:75:f7:34:26:e6:14:26:c8:6b:55:8e:94:
0d:69:27:8f:67:e2:c1:13:a5:8a:7b:cd:c0:2f:bd:
68:2c:b1:2f:5a:7a:36:0b:53:fc:05:6c:e6:58:6d:
4f:3d:22:e5:70:17:a3:6c:0e:68:6a:8c:b6:66:c1:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:7C:CF:50:A9:EA:AF:71:99:DA:E3:A0:80:F0:2F:50:B4:EB:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:8055::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c1:5b:d8:0f:84:c2:7f:f8:bd:35:49:2b:7c:dd:dc:98:79:
c6:f8:fe:5a:0b:e4:69:bb:c2:08:1f:71:e2:6b:af:b7:27:ac:
af:c5:6a:ae:a3:89:15:98:9b:d2:c7:1b:3e:0b:6c:89:46:50:
8c:64:d6:fc:18:4e:33:5a:87:a8:7f:2e:e5:e1:81:3d:10:59:
98:29:ff:5d:55:bc:d5:30:6d:72:67:b4:bc:bd:78:e9:a5:44:
25:d8:38:37:74:9a:33:21:cd:87:f8:64:96:b3:ad:a4:6f:4f:
26:a4:e9:ff:9a:c3:8e:c3:76:5d:12:bd:88:cc:ee:d5:3c:83:
b2:2d:d3:68:54:a3:0a:b9:8b:21:70:70:af:40:b4:e4:e8:57:
ff:e3:a2:47:b8:82:78:18:1d:ce:62:dc:75:14:b7:07:64:30:
e2:2b:a0:d4:2d:eb:82:e6:b2:43:aa:95:b2:4a:21:a8:ab:77:
7e:2d:f6:e2:fb:a7:1f:7c:ec:18:f7:9e:53:6b:c9:c8:56:bd:
23:90:44:10:4e:b6:61:36:5f:13:f7:b2:6c:b7:a6:cf:f8:93:
15:54:3b:8e:cb:84:9e:94:40:b7:51:e4:0d:af:a1:83:6f:ef:
d7:92:9f:cf:64:81:72:7c:18:c2:70:54:c0:ae:b1:c7:8f:26:
5e:5e:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:29:51 2026 by rpki-client