
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa
File: b4f65a39-964d-323d-9258-8f2f4e975abe.roa (raw, json)
Hash identifier: X9Z6nzMQsJvGyP6rUj7OpJpJry2Kcsh+xLfOReGys64=
Subject key identifier: A9:DC:2C:92:A8:6B:E4:78:CA:59:AD:8E:90:E4:ED:A1:DC:BE:A8:83
Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial: 010D0C9F4328584EA786FF79ED245DCF725BD780
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 393562
IP address blocks: 2604:640:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:86:ff:79:ed:24:5d:cf:72:5b:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=535203b2-da05-46ea-8f74-4d23c1b60041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:24:f8:49:9f:b7:ae:e4:89:80:c0:91:01:
d8:fd:23:3c:07:08:6f:38:b6:35:a8:0e:16:02:aa:
3f:db:97:88:25:99:15:37:88:97:87:5f:c0:cf:c0:
b9:5b:a9:af:3b:5c:05:01:24:e7:ff:b1:f3:31:c8:
bc:67:59:e0:6f:4a:23:1e:ee:09:37:1e:67:14:fb:
72:71:d9:9e:ab:33:23:64:1f:1e:8e:72:3a:d7:e3:
da:68:6e:af:78:4b:20:6d:e7:26:2f:e8:4b:b6:83:
65:c0:82:4d:11:70:76:6a:c2:fa:06:2c:95:3e:4c:
b0:1b:2b:f9:23:77:81:df:d8:dc:cc:3a:b3:41:84:
1a:78:95:b7:93:80:a3:0e:59:b7:09:08:f2:81:c9:
34:1b:3c:91:27:94:13:63:3d:4c:07:74:c9:41:c7:
88:26:1c:d0:1e:0e:6a:b9:a1:88:52:76:75:32:65:
00:12:1e:f0:7f:b9:ce:e6:33:c5:75:0f:80:27:c3:
be:85:98:e9:17:ad:c4:07:83:19:21:d7:af:7b:c7:
27:24:9a:17:a4:f5:8f:eb:ff:6e:d6:e1:b2:1d:5f:
7d:7c:2b:7d:3c:98:7b:05:56:d7:d1:9d:00:36:a1:
3a:7a:de:a3:1c:88:24:dd:ca:0a:73:08:09:4c:5b:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DC:2C:92:A8:6B:E4:78:CA:59:AD:8E:90:E4:ED:A1:DC:BE:A8:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
X509v3 Authority Key Identifier:
keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:640:106::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:fd:6f:d5:fb:27:2d:11:40:f8:b3:a7:d2:19:2e:e4:53:11:
1c:d6:7d:2f:4e:7b:d6:e0:26:ca:d3:62:53:b0:16:76:df:6b:
90:20:7a:45:c7:14:f8:d9:d8:bc:66:ad:83:9f:67:8f:b4:58:
b2:63:93:06:f9:be:de:16:7b:a0:6c:09:45:93:f5:b6:38:4f:
49:5f:53:4e:13:c2:6a:f0:f5:14:9f:81:d7:02:45:54:9e:2a:
33:2a:d7:94:c4:dd:85:d7:71:3f:a7:62:ea:b7:2f:7a:cb:b6:
37:60:94:a0:e3:d1:08:73:7a:bf:eb:1b:5e:3c:58:7f:27:92:
a4:10:9a:a5:a9:f4:35:63:1d:eb:2a:ff:d0:47:d2:35:32:c4:
66:e4:0d:4b:09:0a:6c:a1:12:4e:83:16:3a:33:03:28:ad:32:
5c:80:02:2b:15:d7:45:18:dd:83:76:fd:b8:03:69:86:cd:26:
08:48:d2:0a:ba:e1:ce:6d:6a:ab:7d:c5:db:58:d5:c9:a8:2c:
40:8a:f9:ec:0c:aa:92:91:1d:48:f7:8d:13:fa:f8:c5:57:21:
6b:d8:f6:47:ba:2d:ca:ae:bd:fd:33:6e:f5:ee:72:76:13:ae:
aa:02:74:91:c7:8e:38:93:43:24:40:0c:90:1d:e1:69:68:a6:
85:6b:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:29 2026 by rpki-client