
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa
File: cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa (raw, json)
Hash identifier: AwhyYwOhOeAKF1Fxh1FEc034eLtSfp5B0E6OgKpfaE4=
Subject key identifier: 6F:F7:1D:6F:CD:41:16:91:20:42:03:75:8A:06:91:EF:E3:30:8C:35
Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial: 010D0C9F4328584F3E47D551F9880F40DBEB2280
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 177
IP address blocks: 2001:48a8:68fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:d5:51:f9:88:0f:40:db:eb:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=e231ca27-b924-47dd-924b-a2c0685f7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:a4:88:0b:42:c4:29:b0:59:cb:25:3e:3d:
72:bc:03:44:27:5b:df:d0:63:88:85:ce:5f:ad:99:
70:e2:8f:92:9f:89:85:6a:51:41:3f:e1:fe:4d:02:
22:b8:eb:f0:2f:61:56:bd:03:5b:2a:5f:be:a2:9b:
52:bb:c3:82:6a:a0:4d:49:66:0a:e5:cd:93:40:c4:
93:d5:b7:14:f1:69:20:85:6d:71:38:f4:43:a7:1a:
dd:2e:ce:43:92:85:4d:b3:08:fc:d1:72:b9:05:17:
23:8a:b0:97:a6:35:a0:58:e4:41:29:1d:1b:44:5a:
e6:0d:a6:11:14:3f:81:a5:b4:1a:f6:a1:39:2c:6f:
4d:45:24:46:18:c9:27:80:f3:b0:14:1c:42:a2:ca:
9f:ae:00:10:db:56:65:5e:d6:2a:ef:4d:8f:67:14:
88:67:3d:f3:d8:00:7c:be:1a:77:3b:97:95:71:f0:
0b:ea:73:7e:25:f1:c7:3b:b8:89:fa:4c:89:72:00:
a9:bd:aa:a6:9c:e6:b6:2d:2a:ed:56:6b:35:3d:5d:
2b:a8:0b:ee:ab:08:22:ec:08:43:ef:20:48:e9:9b:
a7:bf:e1:f5:67:2a:bc:23:ce:4d:d8:92:80:cc:c0:
00:c2:34:fd:ce:3e:65:e6:7d:3c:c4:ea:88:1a:a3:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:1D:6F:CD:41:16:91:20:42:03:75:8A:06:91:EF:E3:30:8C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
X509v3 Authority Key Identifier:
keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:48a8:68fd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d7:e5:d3:2c:a5:8c:3c:e0:bf:40:53:08:f3:5b:73:76:04:
bc:0d:38:74:a3:5c:0f:4b:ae:cd:73:7f:29:27:eb:7f:bd:ae:
0a:a7:9d:04:64:fc:39:6d:d4:c0:83:87:3d:a7:03:5d:18:0b:
28:8f:41:93:07:30:18:f6:96:c9:eb:96:2b:22:e3:3e:b7:1f:
6b:aa:c8:39:55:4f:50:76:44:ab:31:64:e4:6d:26:75:da:ac:
1d:03:04:18:14:aa:39:5c:8c:e1:54:1a:14:74:e9:4c:6b:76:
e2:c2:41:31:4d:eb:81:35:65:f0:cd:28:4f:84:6b:fe:66:a9:
cc:7c:47:83:69:98:84:36:6e:3a:48:cb:ba:5a:94:f5:7a:d5:
2f:68:89:f1:79:ed:6a:19:92:23:88:e1:2e:eb:34:bf:9e:ca:
e9:4b:94:fc:6a:a1:bd:49:68:3f:43:a6:fd:bc:63:a3:3c:7a:
3b:79:2e:2f:2b:8a:25:21:6f:27:c7:c9:dd:c7:30:96:f7:67:
5d:41:b0:c9:6b:c6:14:2f:e8:72:9c:b0:d7:ca:8c:5c:3a:ec:
6c:66:18:ac:07:c4:36:d4:94:75:81:4d:ac:ec:14:0c:32:f1:
ed:1d:98:38:8d:c4:23:af:f1:ab:e1:77:93:19:a0:b8:e8:c4:
09:55:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:11:41 2026 by rpki-client