
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
File: 35ec1831-5758-3354-b185-9ab807b853f2.roa (raw, json)
Hash identifier: 4hTTtF3mzpAei3EUsm3NmUV0dseUEy3sGzYGAOKYKU0=
Subject key identifier: B3:0C:31:14:74:24:D3:98:60:B9:D7:5F:4B:37:7A:80:14:51:C3:F3
Certificate issuer: /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial: 010D0C9F4328584D3DFF97CB171D570E9C3C3F40
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 397045
IP address blocks: 199.233.129.0/24 maxlen: 24
2602:801:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:97:cb:17:1d:57:0e:9c:3c:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=70d267e9-08fd-47f6-93dd-ea25ced66180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:8b:89:1c:89:7a:20:fd:a0:5b:18:c9:93:
f0:02:fe:d1:31:b4:90:af:07:0e:c1:fe:d8:2f:f7:
cd:ee:5a:12:51:21:d0:b5:0d:cf:d0:4d:d0:fb:d9:
54:2c:3c:1a:ab:46:83:82:03:89:e5:5d:99:73:64:
0a:d5:e1:c7:7f:bb:5b:35:18:7f:d9:ba:a5:74:0a:
db:ac:7f:fa:b4:36:db:f7:50:e4:94:74:83:07:f6:
73:bf:1b:ed:d5:28:1a:47:d6:c8:b7:d0:7d:59:b9:
75:90:17:a4:e2:74:eb:61:a6:13:ad:29:cf:aa:14:
11:f9:cf:eb:ed:5f:a0:6e:3e:73:b7:ee:17:e7:66:
7d:56:71:3b:23:cf:0b:24:37:75:2e:84:e0:b5:31:
3f:8f:ac:2c:56:49:ff:68:3d:9b:36:14:4b:d1:a9:
ed:5a:5d:2c:25:5f:27:69:8c:cc:6a:96:74:46:72:
43:c5:06:36:57:6c:41:f9:7e:e8:98:89:ca:6d:d1:
65:35:d6:06:ea:49:71:43:33:48:72:45:23:81:8f:
40:76:3d:23:bc:6a:67:14:7d:4c:3d:1c:27:17:a6:
09:86:f7:8f:5a:64:7e:69:25:ee:6b:f7:53:db:11:
65:71:d6:ed:95:d7:c9:73:3d:39:20:64:d6:41:ed:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:31:14:74:24:D3:98:60:B9:D7:5F:4B:37:7A:80:14:51:C3:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
X509v3 Authority Key Identifier:
keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.233.129.0/24
IPv6:
2602:801:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:84:70:28:e0:c9:8a:e1:b9:ae:19:93:bc:06:b3:3c:2f:9f:
22:a2:97:63:d2:54:c2:c8:83:53:b0:b2:72:02:40:b0:66:4e:
75:ad:d4:0b:c0:ef:30:2c:30:12:d5:de:75:a3:84:1b:74:4f:
88:cc:cb:56:64:5f:c0:cc:bf:a4:e9:6a:68:b5:e6:b7:fd:96:
a6:c7:d2:d5:be:bc:8d:7f:4d:0b:50:ba:b8:c0:f0:d1:17:0f:
c6:3c:ec:18:b0:44:23:c3:07:b2:44:8f:fb:da:b7:cc:44:5d:
be:bf:54:ab:77:38:a4:7a:8e:73:f5:2d:ec:f1:4e:54:b6:07:
a9:5f:26:62:d7:17:f7:72:3c:43:49:83:9a:27:c5:03:c0:26:
9f:dc:e9:c6:1f:61:5c:bf:e7:26:11:bc:fb:f9:31:1e:07:cc:
00:b6:1a:89:b9:d4:23:b0:9f:8e:b9:af:ac:8f:ec:64:1c:66:
b6:0f:b3:39:d6:08:cb:71:7b:5d:54:cc:48:73:43:70:c4:21:
c6:a7:69:d4:af:87:a6:29:98:31:5b:35:5a:3a:8d:fa:ef:e2:
90:f7:d3:38:b3:0f:c3:7a:7a:23:23:d3:4f:c2:29:88:54:14:
b5:bc:e8:3a:74:17:11:6b:23:3c:11:70:4a:62:59:e3:53:9c:
38:0a:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 04:43:51 2026 by rpki-client