
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
File: f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa (raw, json)
Hash identifier: uUVreVM2Jox/RKzQrbb4q+s5PGa0NV/bYI4KOhXOFWE=
Subject key identifier: 77:E9:81:42:6E:6D:BD:F5:DE:45:AB:49:73:5F:C5:DF:51:8B:A6:B2
Certificate issuer: /CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Certificate serial: 010D0C9F4328584EA2DFD0C82060850AFAF60480
Authority key identifier: BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
Signing time: Mon 27 Jul 2026 09:00:12 +0000
ROA not before: Mon 27 Jul 2026 09:00:12 +0000
ROA not after: Sun 25 Oct 2026 09:00:12 +0000
asID: 40893
IP address blocks: 2620:ae:a000::/44 maxlen: 44
2620:ae:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:df:d0:c8:20:60:85:0a:fa:f6:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Validity
Not Before: Jul 27 09:00:12 2026 GMT
Not After : Oct 25 09:00:12 2026 GMT
Subject: CN=e2d9cd02-31d3-48bc-8c1e-68f927aa1f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:71:fa:76:5d:68:a0:b4:00:85:c3:dc:89:
29:2d:3e:bc:d7:38:54:d0:a5:1e:6f:58:9c:07:1f:
d5:37:65:2b:a6:f9:60:6a:ac:f5:51:f7:da:f6:cf:
28:98:a6:a8:5f:d5:c8:cb:52:20:9d:62:ec:2e:fd:
b1:eb:43:66:82:9b:9b:cf:70:21:16:6a:ba:89:df:
2b:b1:f5:54:33:85:c8:e9:35:07:ae:cf:7d:d0:8f:
70:a3:a5:6c:a8:ab:4f:68:09:27:83:db:ba:c9:69:
7d:f4:0d:1f:de:92:2e:6a:ae:97:b7:1d:3a:a7:45:
2e:00:f9:64:65:e5:ef:18:45:78:4e:18:5a:83:37:
31:18:90:e8:29:52:31:5f:28:f9:c3:62:85:f0:23:
11:ce:6e:96:64:5d:58:93:4d:28:c2:64:f1:d2:91:
e0:e7:9a:d4:db:ce:b6:7c:94:a7:4d:db:e1:de:b5:
14:1b:f4:06:30:71:43:d3:3d:d2:eb:43:ae:4e:4d:
d0:01:c7:f6:cf:09:80:df:b5:f9:bc:25:49:20:78:
ec:1f:e6:00:06:c4:37:2f:7c:5b:93:6e:eb:87:44:
65:03:2e:48:3d:92:4b:de:2e:57:cb:b2:d3:45:d2:
1b:e4:fe:8e:e7:84:db:f2:bf:ef:f2:0c:8e:da:60:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E9:81:42:6E:6D:BD:F5:DE:45:AB:49:73:5F:C5:DF:51:8B:A6:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/f8acd7aa-b951-38c2-b4da-01d6dc220b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
X509v3 Authority Key Identifier:
keyid:BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ae:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:de:e3:32:84:ed:cd:85:df:c7:e2:96:3e:15:0c:98:f1:d2:
c7:ae:ed:bd:30:c6:36:4d:c1:8b:fb:f2:54:5b:1d:cd:ae:57:
06:97:99:93:56:6b:1b:47:e0:da:b4:54:11:fd:a6:85:87:c1:
87:10:25:db:30:7a:34:c5:3e:82:56:1d:c9:43:e3:dc:3d:56:
dc:4c:02:2a:a0:74:ee:99:75:6d:ea:4d:b8:e4:a0:6e:f5:87:
86:94:77:e7:e7:f6:12:66:ab:b1:e8:0b:8e:0b:24:cf:ad:75:
56:50:7b:9f:6a:a7:fe:cb:8c:e7:8b:b7:9d:d5:59:de:53:ec:
db:aa:2f:30:37:60:7d:da:e0:ae:ef:4b:44:b3:fa:4d:e0:62:
5a:34:f2:a3:db:25:6d:bc:68:d6:3a:1c:53:1d:20:e4:2d:56:
ac:93:58:c3:90:81:77:d8:0c:1e:51:4f:58:54:e0:4e:a7:09:
f6:01:47:1e:6e:94:91:7f:a5:42:66:2b:f9:6a:16:bb:f0:f6:
a1:d8:4d:44:d5:01:26:f9:16:aa:1a:50:1c:32:00:45:1e:5d:
ea:65:b8:72:23:a0:c3:93:c9:62:91:bc:a6:9f:13:de:7a:51:
95:ea:82:fb:28:d2:d2:8b:aa:b6:3f:e9:32:21:ad:fb:30:a3:
c2:96:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:56:11 2026 by rpki-client