
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa
File: 1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa (raw, json)
Hash identifier: 9AZ3fCTiCGvG7gb0WDidk+xQFN/MiCDt0aI5mZ2DgtQ=
Subject key identifier: B8:8A:72:32:1B:17:53:B5:05:44:B8:15:9F:66:B4:F3:AA:3A:B6:CE
Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial: 010D0C9F4328584CDB021CB0D3042C424B505390
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 8075
IP address blocks: 2620:12a:c0a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:1c:b0:d3:04:2c:42:4b:50:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=d7bca954-2fc1-4077-9a2a-f2095aa79846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:00:45:24:46:b3:43:a1:7e:14:80:61:56:
eb:3c:59:25:ab:88:7e:b2:b0:31:f6:60:44:ea:23:
e9:a0:94:72:99:68:8a:35:9f:85:2d:93:84:76:86:
d9:9e:89:09:2d:0c:6d:b5:8a:63:ee:07:2f:6c:e0:
8a:0e:cb:99:de:8a:06:e9:ac:8a:81:0a:6e:9f:01:
6c:f7:ed:b3:47:35:3f:70:c1:d2:7f:88:2d:a4:98:
c1:06:70:b6:86:48:8e:28:3a:e3:36:bf:bd:91:be:
de:0e:1e:9c:2f:d6:be:15:6d:bc:f7:e7:4e:24:0a:
5b:82:24:94:2f:9d:50:53:6c:d6:63:82:5d:b7:37:
14:b9:47:03:5b:c7:bf:3e:2e:7f:57:bf:49:27:fe:
6d:f0:c1:84:ce:f1:f8:2c:5e:6e:66:f8:67:e5:c5:
82:79:4e:0d:4e:51:d9:32:5d:aa:a4:fa:d1:4a:18:
a6:44:65:0f:a8:4b:aa:b4:39:13:ec:a9:a2:bd:9c:
a8:87:af:ec:f8:da:11:42:27:22:9a:cc:7a:90:ad:
66:e3:1f:84:7d:fd:c9:8a:09:c1:6a:e1:18:68:84:
5a:d1:b5:f0:ac:f6:b0:40:c9:01:5e:1d:32:b5:61:
08:be:42:ad:9b:3d:7a:6b:ac:b9:e4:a6:b5:3b:22:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:72:32:1B:17:53:B5:05:44:B8:15:9F:66:B4:F3:AA:3A:B6:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
X509v3 Authority Key Identifier:
keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12a:c0a3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ae:c3:53:d3:cb:3c:f9:33:1e:83:36:86:29:80:dc:6d:40:
20:30:9c:a4:0e:d9:cd:28:a4:e6:5d:d1:83:56:9b:39:a2:72:
4f:93:dc:58:c7:31:1d:8a:12:3d:69:05:2f:86:12:8b:93:ea:
23:95:61:1f:82:2a:ed:94:50:c3:a2:84:c4:1e:7e:02:93:b8:
1d:eb:be:eb:5b:84:78:ad:f9:c6:f3:10:8d:3b:f9:3b:58:7f:
8b:0e:7e:ef:be:2a:45:0d:68:87:5c:15:03:f5:c9:04:b0:d7:
e5:cc:04:d8:2c:5a:83:3a:0c:f3:71:6a:cf:0e:63:1e:e9:2e:
5c:1f:7c:6a:d7:91:46:81:60:97:8d:91:fe:2e:d2:c8:30:8c:
fb:60:c5:a3:f6:ad:83:7a:9d:f2:ef:f0:af:8c:c3:db:f6:69:
a8:22:44:82:6e:05:78:ee:f5:8d:7e:df:8b:4b:3d:08:28:dd:
84:cb:04:ca:ab:49:16:83:c0:11:68:d7:c6:c1:7a:64:52:a3:
f2:9a:f3:b8:d2:a0:ab:d3:d2:26:31:25:10:33:4e:50:75:59:
16:49:15:36:76:87:4f:be:71:a9:a6:8e:13:fc:bb:14:df:3f:
cb:c3:88:a6:6f:ec:b8:f3:ac:99:44:1b:bb:b9:dc:95:04:4e:
a4:26:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:12 2026 by rpki-client