
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa
File: 04d89a5f-3251-354c-86c6-5061befcb41c.roa (raw, json)
Hash identifier: JVda4C+52F3YnfQmyVrcq8Pn0m9mcEWdY5kq0DRlt1o=
Subject key identifier: DA:C9:2F:F1:10:CD:E5:3C:27:4C:8F:4F:86:CD:8E:AB:63:E8:0E:DF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0BBD60D61FCA04793BE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 2604:2d80:9180::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:bb:d6:0d:61:fc:a0:47:93:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=88f0a0cd-9c5f-437a-842e-021351331e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:aa:a9:bb:d7:ec:f8:9c:ac:e3:2e:ec:1a:
7e:e0:72:56:f4:72:ae:ad:1c:ea:5c:60:d6:37:bb:
e3:b5:7c:ee:89:5c:f8:c3:9f:1b:61:61:e5:c4:ca:
31:60:de:6e:8f:68:e9:a9:f7:a0:00:72:fe:04:64:
e6:4c:1d:02:44:8c:fd:8f:cb:e2:16:05:1c:68:b5:
f2:a8:83:21:39:60:11:98:e0:fa:d3:2a:99:32:0c:
71:50:74:b3:aa:86:e0:93:8b:e3:93:52:dd:39:b9:
34:c4:0d:b8:4f:2e:76:d6:21:c7:38:28:c4:90:e9:
1d:f6:f7:1f:11:b4:da:37:64:3a:bc:40:c1:06:a0:
f8:a2:ea:5d:03:97:05:f6:82:23:09:1a:e1:d1:41:
df:53:ad:03:da:d9:6d:a7:a7:d0:dc:28:96:e7:2d:
19:45:93:17:61:e8:b5:ee:b3:e9:92:4e:94:cc:12:
b6:7b:71:1c:a3:92:84:bd:05:31:18:a7:33:20:55:
4a:34:72:7d:be:71:a1:f5:aa:06:e0:38:e3:be:b3:
5c:a6:a7:69:88:c9:45:db:b5:87:b3:57:98:1b:cc:
34:15:ed:26:3f:ef:4b:39:99:90:5a:e5:26:cc:ca:
46:58:96:27:e1:a3:3f:82:73:c9:94:2b:4d:8e:e4:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:2F:F1:10:CD:E5:3C:27:4C:8F:4F:86:CD:8E:AB:63:E8:0E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d89a5f-3251-354c-86c6-5061befcb41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:9180::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:63:ab:0e:62:a8:b9:74:f1:0f:1e:81:c1:74:d8:0e:9f:5a:
40:0d:19:da:82:56:bd:16:b7:e8:21:36:19:38:bd:ad:ff:05:
b1:ae:75:69:37:cc:9c:eb:b6:98:a3:9e:ab:89:c8:cd:47:2b:
6e:28:3e:93:7e:18:f6:b4:07:77:cd:ff:26:53:12:01:5a:f4:
b2:cd:3d:3e:12:e6:11:44:26:29:72:92:92:99:6d:bc:89:09:
37:f8:ec:65:8c:04:f0:9d:f4:02:54:a0:c1:f6:20:fa:d2:be:
f2:92:2f:cd:c9:cf:89:c4:de:5d:b0:de:c6:9a:c7:1a:32:30:
29:c2:a4:9a:65:cc:e7:f1:cc:ad:c3:16:76:76:1f:1f:c9:1a:
0e:20:1c:ce:a1:b9:d8:4b:a2:26:de:45:e1:e4:e4:7f:db:47:
61:e6:19:c3:33:3d:78:c0:71:ae:bb:9e:73:ea:a1:79:ea:29:
77:6b:36:5c:4f:64:f6:4a:5c:10:36:54:83:1e:00:2d:09:8e:
ef:5a:8d:41:ad:73:3d:9c:ac:db:44:3b:9d:f8:8c:63:67:da:
d9:7a:04:54:48:9d:9d:55:2b:31:9e:1b:22:98:4b:d1:7d:7f:
b2:77:66:4e:ce:88:3e:31:f7:3f:a7:c9:e8:8a:e5:b1:2a:3d:
74:b6:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:00 2026 by rpki-client