
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa
File: 35ae5d38-189b-36c7-91a9-9c5eb9065299.roa (raw, json)
Hash identifier: OI+FUPqWFyQ6fMGSycliuJvRb3obb7CSZHebtc0HUvw=
Subject key identifier: FC:AB:F9:5E:1B:D6:84:88:67:3E:51:46:53:82:AC:11:5E:7A:F4:19
Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial: 010D0C9F4328584EAE819A3252D97ACE99EE4400
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 23428
IP address blocks: 2602:fb68:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:9a:32:52:d9:7a:ce:99:ee:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=ae21f322-6f54-4c2b-907e-bf6273ce3f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:79:76:f7:ca:09:1f:16:0c:2c:49:0b:83:
9f:f7:8a:c5:8b:62:24:d9:28:72:bf:be:ca:de:52:
3f:f0:fb:b2:7f:65:a1:05:b4:42:e4:40:1f:48:95:
4f:2c:f8:2f:7a:1e:21:79:48:ef:7d:4f:d8:4d:39:
0c:7c:27:38:95:84:65:9f:d2:18:ca:ac:e3:f5:ea:
68:8d:87:8d:27:22:06:57:09:ee:15:63:40:9c:d5:
b7:ab:e3:80:8a:55:e7:9c:63:b0:71:e4:65:8e:a5:
61:05:4f:78:e1:4b:91:42:00:d8:de:d8:e1:3e:44:
96:5e:1e:af:da:36:06:cc:70:c2:3d:f7:6a:3d:cf:
4b:0f:e2:da:83:61:d8:c9:56:07:c4:2e:9c:35:0c:
63:23:00:68:d7:1d:5f:8d:ff:7f:2b:3f:48:ed:10:
49:9e:dc:71:b3:e3:c4:b5:15:34:61:d6:b0:5a:cd:
54:65:28:d9:ce:cf:8d:61:6d:54:03:12:c8:67:51:
e4:1e:87:c2:0f:59:b1:ce:22:a6:db:ba:75:87:df:
df:a3:af:d9:71:54:90:be:e0:28:57:4c:6d:63:af:
2a:07:87:7f:24:4c:90:41:ec:8f:20:9c:f2:04:32:
0a:a0:50:2e:36:6d:d7:0a:d3:3d:6d:2d:2c:c8:86:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:F9:5E:1B:D6:84:88:67:3E:51:46:53:82:AC:11:5E:7A:F4:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
X509v3 Authority Key Identifier:
keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb68:800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:69:ae:9a:d6:f4:59:9e:51:35:d6:61:02:27:92:08:d7:55:
a8:9a:7f:4b:7f:88:e2:a2:f2:dd:d5:b8:3b:67:68:97:8f:fd:
51:ca:8d:75:fc:45:3f:38:1c:87:eb:b7:2c:f3:80:b9:a4:e9:
7a:a4:a6:3d:20:04:8e:a6:65:49:91:c2:5c:1a:e7:d7:02:be:
14:60:51:bc:22:4c:d5:05:9a:2b:4c:f3:d4:1c:96:4a:d2:1c:
d0:e3:65:2a:96:8d:99:b3:30:2e:16:94:83:d3:30:7c:10:aa:
22:a4:d0:cf:96:38:67:c7:cf:fa:dd:4f:37:af:1d:67:aa:4c:
3e:ef:f1:18:c8:a4:37:88:a9:81:79:2e:51:e7:d1:78:5e:91:
34:a0:6c:c9:c6:66:80:a0:14:41:ed:8f:69:cf:b7:e5:0d:b5:
43:80:2f:04:50:fd:af:92:82:7a:13:42:6f:76:a0:85:bf:8d:
13:f7:c9:cc:a5:51:48:0f:f0:33:18:68:5f:2e:14:16:b1:ff:
ba:8d:27:22:5e:35:20:06:19:23:e3:eb:a1:e4:61:bf:0a:cf:
a0:9d:d9:24:a7:c2:b1:44:ae:f0:85:3b:18:da:fb:32:a4:4d:
e2:a6:14:e2:52:a8:13:79:95:16:42:ef:81:81:50:89:33:a2:
58:14:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:33:31 2026 by rpki-client