
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/ecaf10d0-db33-3629-9531-0a0926005385.roa
File: ecaf10d0-db33-3629-9531-0a0926005385.roa (raw, json)
Hash identifier: vX2ceRq+Fno2kX/qd/OY9A+TXtzmKqt8I0OzXhnA+l0=
Subject key identifier: F4:4D:BC:90:81:BC:FF:1C:87:80:61:E2:22:E4:A7:90:80:DB:7F:2F
Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480
Certificate serial: 010D0C9F4328584F4DA28CDD13F609B2B3FB3880
Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/ecaf10d0-db33-3629-9531-0a0926005385.roa
Signing time: Sat 26 Sep 2026 13:00:12 +0000
ROA not before: Sat 26 Sep 2026 13:00:12 +0000
ROA not after: Fri 25 Dec 2026 14:00:12 +0000
asID: 16509
IP address blocks: 2602:f3d4:a01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4d:a2:8c:dd:13:f6:09:b2:b3:fb:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480
Validity
Not Before: Sep 26 13:00:12 2026 GMT
Not After : Dec 25 14:00:12 2026 GMT
Subject: CN=e02397ed-8a2a-4f3c-9023-26891c44d596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:d3:0d:f6:18:f6:84:29:b1:fc:2a:2b:51:
2f:a5:d5:6a:e0:bf:6e:e8:1c:46:ca:8d:31:63:58:
9d:5b:8a:76:e3:44:c6:e9:13:8a:ea:08:c5:81:49:
81:20:6d:15:d2:ad:fc:8c:32:7c:4f:59:3d:03:79:
fe:79:30:07:ba:a7:2b:28:e1:d3:2c:d6:14:75:f9:
b5:7b:8f:a2:d7:c9:4b:f9:e0:b7:9c:8b:1f:3c:c5:
3f:72:97:60:c3:7b:91:f3:98:a2:9a:d3:b7:d8:36:
51:af:79:00:a5:a9:d2:14:34:e0:8e:8f:73:b8:02:
65:86:78:9a:ce:15:d3:dc:65:66:a0:67:df:6f:57:
38:a1:70:5e:04:a2:4f:0a:29:42:5d:56:17:90:5a:
92:b5:d7:9b:6d:a9:92:89:ad:7f:c7:ae:90:ca:87:
83:1d:cc:47:78:5e:8f:85:a6:71:41:39:60:6a:e0:
a8:88:e8:68:05:a3:19:b2:8f:d6:13:27:30:82:e5:
42:69:9a:c7:dd:1d:97:e2:35:71:cd:51:f2:ba:c6:
f9:2f:e4:4b:44:ac:99:c4:2b:30:11:17:4a:b3:3a:
e3:92:60:7c:ca:0c:f5:12:f3:dc:e5:e7:08:66:90:
6d:08:f5:f6:0e:e2:75:74:07:46:a3:08:d8:00:40:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:BC:90:81:BC:FF:1C:87:80:61:E2:22:E4:A7:90:80:DB:7F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/ecaf10d0-db33-3629-9531-0a0926005385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl
X509v3 Authority Key Identifier:
keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f3d4:a01::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:99:16:4a:2c:2c:30:03:36:82:75:41:e8:41:d7:1a:9b:ba:
3a:1b:fe:10:4a:8a:df:1c:c1:da:10:9c:ee:39:69:66:1c:8b:
ec:9b:37:ff:9f:ff:72:4e:1f:65:e3:48:a5:cf:cc:1c:f4:ed:
ca:5e:03:59:5c:83:8b:08:8c:8c:72:39:80:cc:82:95:98:24:
ba:2b:47:0c:91:b0:9c:13:a6:ae:95:68:23:1e:c2:19:7a:9e:
4c:5e:93:34:b7:b1:39:f7:fc:78:a1:bf:61:d8:cc:2c:80:2e:
26:b7:b0:00:1c:93:0a:b4:fe:02:d9:59:44:76:3e:c5:c1:5d:
5e:52:40:42:ae:50:70:8a:92:16:09:a8:4a:c4:1d:d8:7c:94:
f8:87:97:cf:ac:f7:25:73:06:ef:49:94:52:b2:4c:85:e3:3f:
37:fe:31:eb:36:2d:79:a2:0f:2c:60:9e:21:73:8c:18:ff:03:
a4:9f:15:39:01:96:90:bd:d1:22:f5:46:34:0c:4e:f6:bc:c0:
6a:9f:e6:00:5a:1d:3e:19:36:48:2c:f3:49:b3:7b:4e:ce:d0:
9d:c4:07:62:bd:65:fb:6d:ea:e5:96:09:b0:09:3f:02:18:0f:
81:fc:2e:d0:11:c5:16:77:df:e8:61:fe:2e:50:8b:75:79:c6:
ae:13:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:20:28 2026 by rpki-client