
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
File: 89500a8e-1d73-3c1c-a9d4-bf905101344e.roa (raw, json)
Hash identifier: 6jZQTeAr0XlY06g0ohTxBzO3m4PYeSnEoc83P/UnXZM=
Subject key identifier: C6:E2:F2:38:84:0D:26:14:B3:B6:60:DE:06:0F:0F:99:C6:F7:FF:BC
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584D667A4D29E1075A6A80210600
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 9450
IP address blocks: 2607:fcf0:4400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:4d:29:e1:07:5a:6a:80:21:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=02d7ed63-ee09-482e-a360-a06e94288a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:01:cb:ac:5d:ea:91:5d:52:99:93:c6:bf:
da:bd:9e:f0:6f:29:0a:cb:81:1e:98:83:c9:d6:21:
40:9c:0c:bb:47:48:7f:26:f3:d1:f4:ec:f1:6c:6f:
c7:64:a1:63:b9:02:1b:dd:49:e8:ca:d3:e3:da:4e:
60:85:60:63:94:28:b4:86:3a:4c:59:d8:c9:af:28:
7e:dc:dd:5a:a2:f5:9e:70:7f:54:b0:28:dc:49:9a:
44:ae:d4:3b:f3:d3:c1:a5:67:92:9c:5b:90:10:76:
2e:79:d7:2b:75:63:68:a1:1d:18:16:3d:50:99:c6:
2e:f8:fd:53:89:bc:9b:80:be:9d:09:d1:ae:83:1e:
e7:a1:9c:08:97:f1:aa:e4:9b:25:dd:c5:83:6d:47:
34:5f:55:38:7f:3e:d8:c4:58:65:6c:67:16:28:9e:
d4:51:9c:d8:53:b7:7d:c0:cf:af:85:84:ed:ea:0b:
05:8b:44:47:6e:e6:ec:90:b9:08:d9:6c:1e:3b:15:
07:e9:64:2b:95:30:d7:ee:63:93:18:e1:3d:3d:26:
23:ff:da:5c:8e:9b:cc:ca:66:33:77:c0:76:96:2d:
a7:df:44:69:a4:10:a4:56:12:65:b8:57:c3:9c:f3:
b1:ce:b2:a1:5d:5d:50:4f:11:13:46:cd:b0:b3:cb:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:F2:38:84:0D:26:14:B3:B6:60:DE:06:0F:0F:99:C6:F7:FF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fcf0:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:84:23:ad:1c:e4:cb:3a:95:41:0d:ec:64:06:1b:a3:67:5a:
68:95:22:88:f7:59:a0:16:eb:3b:3d:4a:96:2a:8d:10:31:eb:
49:cc:4d:d4:f9:c4:eb:40:00:0f:d9:ec:b6:b7:b3:c3:48:82:
20:22:2e:ab:6b:c1:6a:6c:db:ba:c1:ae:e6:05:95:aa:b7:b0:
09:62:fd:58:f2:92:84:cf:0b:2e:07:94:78:36:be:79:8f:e0:
48:bb:dd:8f:6e:6a:74:43:71:ba:d4:32:f4:d5:39:cf:c0:75:
38:cb:b9:6a:13:54:1f:44:00:71:86:56:ad:3a:b5:57:c1:c8:
8d:7b:01:1e:ae:b3:f7:35:c8:ad:fc:26:5b:94:1b:f0:e0:f1:
8b:75:b2:49:a5:e1:5c:51:de:4f:b0:df:13:2e:8f:08:79:7d:
35:5a:3a:f9:d6:6f:b0:da:dc:0b:72:55:63:6d:bd:38:b0:ea:
eb:d7:e1:47:5b:b3:bf:a4:56:36:23:df:8f:47:ab:72:f0:b0:
75:cb:b9:4a:ba:2c:c7:55:12:ef:36:14:87:af:69:8e:18:fe:
df:38:bc:74:34:7d:e7:a9:be:2d:38:7c:83:44:4a:66:f8:91:
90:ab:1a:03:77:9f:10:eb:72:b3:c3:84:87:6b:62:00:c4:41:
8f:7f:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:11:42 2026 by rpki-client