
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
File: 39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa (raw, json)
Hash identifier: N9fFW1STr601LPhY4dt2YJ2pyKGGPwhJFhArWjlHIdE=
Subject key identifier: D1:E6:5C:34:F1:B1:3C:61:B5:41:25:B0:00:F9:B5:D1:4B:23:19:81
Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial: 010D0C9F4328584EA5AA6AEF26EA89A6DDF33E00
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 3754
IP address blocks: 2620:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:6a:ef:26:ea:89:a6:dd:f3:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=1048ca03-141c-46ff-9b65-2b0728f89b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:00:c8:1a:4b:53:f5:0b:24:87:f7:f6:55:
f3:e7:c2:b7:f7:e4:3d:16:c8:6d:27:62:1f:9e:ca:
5d:14:7b:9d:07:d8:ca:b5:9f:2a:bd:f0:8d:71:59:
22:55:51:85:80:b5:8d:9e:86:07:23:38:ec:63:5b:
2d:f4:3d:9e:76:cc:76:89:69:9d:26:58:c6:b3:88:
30:0e:1d:1d:55:04:b3:89:e4:64:e2:9d:15:d3:87:
0f:de:b9:69:f8:af:fc:ad:ed:c6:1a:f4:6a:06:a6:
8c:f9:2a:6f:d6:ab:98:aa:c5:a6:b2:60:46:0f:92:
2f:46:95:66:94:dd:06:7e:a4:54:5d:a2:53:67:62:
cc:6f:bd:d8:43:f6:64:02:11:4f:37:08:c2:ab:41:
a5:ef:67:e3:de:1c:eb:ef:ea:7c:03:3b:ba:f9:a3:
30:bf:c0:be:b9:ea:36:6b:f5:bd:f2:aa:da:62:e7:
d4:2a:8e:f2:58:02:a9:b6:d3:10:fa:b6:49:d3:d6:
9b:99:f9:63:df:c0:c5:87:84:64:c4:3b:24:5c:d9:
3a:ac:57:54:de:1c:34:97:19:c1:a3:69:1d:96:b3:
77:71:01:af:11:38:7b:fb:f1:d4:de:33:f8:21:3c:
f6:3f:4b:4d:c2:5f:d5:c5:a1:65:f6:3d:72:45:1e:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:5C:34:F1:B1:3C:61:B5:41:25:B0:00:F9:B5:D1:4B:23:19:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
X509v3 Authority Key Identifier:
keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:38:1f:5f:b6:e2:c6:31:8b:74:fa:0f:1d:53:64:82:03:8e:
dd:a6:1c:6d:d7:91:77:2d:a8:92:4e:05:58:66:87:7a:0e:da:
27:45:41:da:22:47:f5:a3:44:29:84:0e:69:68:3e:74:43:d9:
da:89:62:50:1f:0e:42:22:92:33:f7:fc:36:e5:0b:e5:38:f5:
b2:ec:4f:da:cf:89:57:e4:04:cb:5c:ca:d8:e0:60:da:0d:06:
54:a7:c9:99:90:25:c3:dd:2d:d2:b1:88:cc:3e:65:3a:5e:d8:
e5:97:9f:e4:b2:2e:0c:35:02:d8:a4:ea:66:44:a3:e4:41:1f:
80:31:85:1b:d0:66:9d:e2:b3:e3:a6:01:61:e9:93:4e:3a:ad:
62:39:47:41:a3:b1:9d:0d:01:fb:04:8e:46:1d:54:07:02:02:
95:86:c4:a1:b8:d3:02:69:ae:91:af:b6:c2:98:4f:c6:5c:db:
07:be:ed:21:43:2b:d9:a0:e6:f9:fa:eb:80:f2:c5:6d:3c:65:
68:7e:38:10:ef:e2:fa:cb:29:1b:17:65:75:78:e2:41:86:93:
12:07:d3:63:29:6d:ac:73:15:b7:7b:0f:be:cd:19:02:3e:09:
f4:98:92:53:8d:12:57:e3:9a:ee:6e:79:17:44:2d:42:53:77:
75:a1:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:36 2026 by rpki-client