
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
File: 48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa (raw, json)
Hash identifier: iXqEw0S/d3T8sY06qHD9m6zIuxJU3pazmww4O7/Dymk=
Subject key identifier: 22:FE:6A:ED:C0:01:E2:B2:D6:96:FC:CF:E1:79:A1:51:0B:AF:BD:81
Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial: 010D0C9F4328584F130236D0CE1DD8E4D580F000
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 14639
IP address blocks: 2602:fd26::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:36:d0:ce:1d:d8:e4:d5:80:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=3d517aa9-33d8-49e8-a36d-acb611d0e80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:85:3b:a0:cc:09:b3:96:b5:d1:76:2b:87:
47:04:5c:ef:fc:ed:8f:cd:9e:69:9b:94:34:13:11:
fe:29:d7:11:d0:ea:2b:4b:1c:be:8e:48:59:12:6c:
50:08:b5:05:c9:db:d9:01:21:ff:43:d8:f9:a0:57:
2a:57:b1:08:b2:cc:eb:b7:07:69:12:34:19:0a:ec:
87:d1:b1:28:eb:a7:4e:28:f1:a9:28:f3:33:5d:11:
63:01:9e:c5:41:82:01:d2:48:e0:0c:c9:fc:60:2a:
cb:39:53:3a:cd:0c:a9:97:e7:88:cb:7e:42:4d:fa:
59:6d:1e:9b:c3:77:10:7b:35:ba:c6:1c:40:ad:b6:
f0:bf:8c:d9:fc:c5:98:13:c8:72:4b:c2:cc:38:35:
c7:e7:ce:f2:68:cd:c8:1f:f8:21:67:34:e7:8d:5b:
92:d1:3b:1e:cd:5d:02:f2:b6:7b:9f:c5:7d:45:7c:
42:7b:d3:ea:ca:a9:c3:e2:ab:79:85:c5:3d:6c:05:
57:3e:29:89:55:e7:a3:5d:ac:93:ac:68:db:31:3c:
ef:bf:12:5c:26:08:9e:d8:8e:00:e9:9c:2a:07:24:
3a:f9:5a:92:9e:61:0d:e0:9b:65:3b:99:7b:30:f5:
35:48:4d:85:6a:f3:97:1e:9d:6a:84:cb:a6:e6:6e:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:6A:ED:C0:01:E2:B2:D6:96:FC:CF:E1:79:A1:51:0B:AF:BD:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
X509v3 Authority Key Identifier:
keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd26::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e4:3b:74:7b:29:a9:d4:c0:41:5b:ac:84:d3:73:61:c4:01:
80:5c:55:fc:d8:a0:bd:e7:2b:46:2b:eb:bd:25:c6:24:7c:5b:
7e:0e:ac:df:9d:1c:eb:6e:b7:df:13:84:c8:28:87:33:e0:ae:
ac:2b:ec:ee:92:b6:c4:fb:23:e1:39:50:9b:97:5b:81:fe:c5:
b6:98:b8:05:11:10:1e:97:d4:cb:d1:70:38:5b:ad:47:73:01:
82:ee:c6:b4:b5:e8:df:37:b8:e7:00:ae:6f:a8:87:87:bd:a4:
4f:b9:b6:58:fb:15:14:32:7c:6f:bc:9a:aa:14:04:70:42:35:
ff:34:41:69:0c:12:d3:f7:bf:b3:48:8a:db:df:13:5d:3b:14:
42:c4:c8:13:c9:e0:f7:68:c9:34:ac:e2:bc:a4:f4:0d:49:01:
f0:f0:e9:46:6b:6f:42:83:ea:26:e4:1e:d1:2b:6e:4c:71:96:
8e:6a:ce:35:90:9c:15:67:30:52:38:c6:12:65:4d:51:8f:04:
34:58:38:c2:80:d2:c4:ce:ac:56:7f:48:1b:76:17:51:71:ba:
0e:5d:fd:4c:b0:32:3c:6c:3f:f5:2a:ac:61:6f:b8:3a:e0:5d:
b6:c6:81:69:ee:c6:ce:4a:bb:1b:de:51:0b:7d:0c:85:cf:e1:
d6:b3:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:16 2026 by rpki-client