
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
File: 40ce2477-9538-3ba0-b98b-1f859a82666f.roa (raw, json)
Hash identifier: kAoUFYnNzwctvbWFSpvytZhx3aachy5fOU+TAAm81+A=
Subject key identifier: 85:E1:C4:60:1A:7F:18:84:CA:BE:31:59:AD:44:DD:A7:68:74:36:9F
Certificate issuer: /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial: 010D0C9F4328584F3E47EACA5B14410B106C2F00
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 7195
IP address blocks: 2607:b3c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:ea:ca:5b:14:41:0b:10:6c:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=4ddad888-461a-4959-9c9d-551d606c50b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:d8:ce:e1:3d:25:dc:1d:c0:69:08:39:53:
f2:87:d3:73:c0:3b:81:de:ed:85:0b:48:46:d4:6f:
45:64:bb:14:ef:d4:aa:2d:9b:69:77:53:6a:f8:94:
6a:f1:9e:81:f6:40:72:f9:a1:f6:a5:c7:af:2d:8e:
e0:24:6c:a1:2c:30:b2:9d:30:dc:4e:99:0d:85:de:
32:8d:f8:fe:5e:60:21:6e:84:07:1d:3e:9e:36:48:
04:4f:c7:2f:ca:a2:6c:c8:85:ee:02:96:d9:91:68:
ef:b4:ec:2e:fc:26:81:6d:f3:be:42:19:83:0f:66:
b4:d6:84:09:1b:7e:e9:4b:73:8d:23:d0:f0:73:1e:
6c:1d:22:08:ac:4e:42:86:ae:96:e4:12:f7:bd:81:
47:7f:f1:ff:fa:84:e6:e9:21:64:84:51:35:a9:ea:
58:19:7a:53:bf:1c:01:6d:17:bd:d8:83:c3:71:29:
50:dc:e0:bf:15:a2:e3:d9:d5:ac:4e:6d:c6:66:de:
6f:29:f5:4d:1f:fe:cc:6a:01:b1:7c:da:be:f6:27:
39:66:05:df:6c:9a:13:1f:a1:ff:bf:36:63:04:ab:
d3:78:7c:71:61:44:1b:01:d4:7b:85:c9:f3:40:2b:
a7:4d:9c:45:b5:a1:9b:a2:4a:79:6a:62:52:31:f9:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:C4:60:1A:7F:18:84:CA:BE:31:59:AD:44:DD:A7:68:74:36:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
X509v3 Authority Key Identifier:
keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b3c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:14:c9:91:ee:fd:39:2e:67:d4:b0:b6:22:82:d4:0a:e2:2a:
bd:cb:4d:53:77:70:a9:bb:c5:df:91:53:6b:88:22:7b:48:de:
3e:8a:a4:62:51:ba:68:21:24:76:f3:6c:ef:08:ca:d1:82:4c:
f7:99:1a:c3:5a:70:76:80:32:c6:b9:e3:36:06:6c:c8:70:9a:
35:bb:94:c9:1c:c2:31:aa:19:d4:37:53:70:97:0a:13:50:26:
ac:ee:a0:77:24:b7:a0:f4:a1:09:9c:62:48:49:70:59:93:f8:
e3:ef:25:bd:64:e4:c9:3e:79:f4:15:46:9c:d6:a7:5f:bc:da:
4f:19:49:aa:30:b7:85:8a:7a:13:72:07:30:8e:8b:4f:14:b5:
1f:49:07:12:96:c3:70:b2:a3:8a:fa:23:45:f5:8c:86:72:10:
76:4d:78:ad:d1:a1:9c:a7:bb:24:2d:c6:a6:7f:f6:5a:71:eb:
f2:eb:9d:18:6b:7d:23:02:e3:97:a6:ea:76:43:af:05:6c:a9:
31:ed:1c:89:dd:d5:47:e7:a6:4b:cb:01:51:f3:bc:a9:4f:b9:
29:0f:85:9a:db:b7:59:cc:b6:4a:2a:d1:ce:0b:81:44:64:ff:
0d:f4:09:00:70:94:86:2f:99:3b:a2:05:31:48:83:c0:49:99:
69:c4:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:28:51 2026 by rpki-client