
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa
File: 08788e9a-4441-35fa-ae0e-b867ca97e82c.roa (raw, json)
Hash identifier: 8imrAxTEYbBp6G1deTNpmc0HssycnALlJ3drFt9+7ws=
Subject key identifier: 4A:4F:E0:73:D9:98:6C:A6:D0:B1:4F:C1:57:A7:4D:C8:C8:3E:EE:45
Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial: 010D0C9F4328584EA7965727BD28BAD375888AD0
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36168
IP address blocks: 2602:f922:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:57:27:bd:28:ba:d3:75:88:8a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=67e2740a-029a-4aa2-aaef-62992f96c76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:1a:cb:d5:29:74:db:3c:48:54:59:cd:6e:
01:1a:7e:28:ed:af:eb:34:d6:5e:e9:76:b8:ed:63:
13:12:92:83:83:75:b7:76:ae:69:81:ef:38:1d:c8:
4d:bd:42:f3:99:12:dc:e5:ee:a4:93:2c:f4:b2:92:
a1:fd:7c:f2:82:24:23:8e:ba:b2:74:2a:a0:46:a0:
28:17:20:1f:a1:08:8b:f8:a1:25:bb:53:29:0c:a0:
82:6a:3d:e8:6b:db:9c:12:db:f2:80:42:a3:49:2a:
4d:9c:d4:dc:95:e4:3f:5e:14:12:13:41:df:cb:e4:
10:25:d6:b6:52:24:92:76:54:e3:e2:4c:b2:37:0d:
a4:ab:67:4e:62:c7:25:ec:9f:02:95:ef:a1:f0:1a:
4e:b9:bd:d6:b5:e5:13:8b:d8:00:72:e8:6f:93:d9:
c5:be:fb:b9:b5:a9:ca:9b:37:9b:8f:51:24:1a:5a:
9c:a0:b5:dd:eb:c6:27:d7:c0:c2:3e:6e:95:a6:8f:
41:78:1a:9a:d7:0b:02:60:4f:11:11:16:48:e2:5c:
71:12:07:78:31:cb:2e:b9:9d:ac:2f:c0:47:97:90:
5e:7b:b3:bb:b8:d2:87:b4:75:c4:02:cb:88:6f:f7:
6b:a6:c7:bd:aa:ff:16:9a:34:d4:06:a6:3c:f5:63:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:E0:73:D9:98:6C:A6:D0:B1:4F:C1:57:A7:4D:C8:C8:3E:EE:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
X509v3 Authority Key Identifier:
keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f922:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a5:50:fd:c7:ae:c5:41:ac:b0:a1:4d:71:07:4d:c6:36:7c:
00:49:b3:09:13:46:dc:22:d8:1e:71:58:99:b1:83:e9:9c:c2:
e2:a3:6b:42:01:00:25:f4:53:70:84:24:81:12:92:2d:19:33:
2e:0c:bc:9c:ac:32:34:2c:55:07:04:e4:a8:81:ab:ee:68:75:
95:56:43:bc:5c:e0:18:3b:c8:20:7e:be:b5:49:4e:2e:0f:9d:
7a:d8:63:c4:8a:8e:0c:fb:a1:f7:55:07:ce:60:60:7c:fa:1f:
8e:de:50:d7:37:41:1c:7f:a7:c0:43:e7:56:13:ce:58:02:c2:
55:bd:e9:1a:be:ce:eb:eb:94:5d:cb:17:ca:1a:7b:15:68:6d:
75:0c:3e:1f:0c:02:c1:41:bb:88:58:87:a6:71:95:f7:bb:4c:
03:ba:75:27:59:da:df:27:4d:42:6d:77:af:ee:3d:49:4f:6a:
8e:0a:f6:e0:9f:ba:43:c8:29:af:8e:ad:39:17:c7:51:63:f3:
fd:bb:f6:43:a4:b7:8e:bf:ad:78:32:f7:73:b2:a7:6a:e1:7b:
81:30:8c:4f:73:6b:c2:e0:7f:20:85:27:f5:15:8a:06:22:ac:
64:17:c4:4a:ce:05:59:5c:5b:0f:e7:45:0a:3c:38:1a:c6:4f:
f2:b1:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:16 2026 by rpki-client