
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
File: 33610651-6c06-37c0-bea7-21abb1c6f7a7.roa (raw, json)
Hash identifier: oIFwuflOKC9YGTtVQOxqxwuOpsKRMn/GpoiopNHzltc=
Subject key identifier: 9F:E7:7F:91:D4:96:19:12:A8:B6:41:06:BC:11:9D:B6:FC:95:BC:54
Certificate issuer: /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial: 010D0C9F4328584EA2DFC26E51D783EF00EF3100
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
Signing time: Mon 27 Jul 2026 09:00:12 +0000
ROA not before: Mon 27 Jul 2026 09:00:12 +0000
ROA not after: Sun 25 Oct 2026 09:00:12 +0000
asID: 397702
IP address blocks: 2607:46c0:816::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:df:c2:6e:51:d7:83:ef:00:ef:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Validity
Not Before: Jul 27 09:00:12 2026 GMT
Not After : Oct 25 09:00:12 2026 GMT
Subject: CN=88ae871e-abdc-4fa4-aa2d-0e2c36ebf4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:a3:a2:75:37:a1:3e:26:43:b1:cd:20:db:
d8:eb:ca:29:32:2f:1b:a3:06:6c:7c:dd:2d:3c:51:
94:9e:aa:df:50:91:df:dc:fb:d2:6c:c3:fb:37:9a:
76:f8:c0:fb:b3:6a:68:4c:47:bd:b3:75:d3:1f:ea:
82:7a:26:e4:69:c0:a5:c1:4e:1d:3c:7b:bd:ae:54:
be:2c:22:64:48:fb:bb:f8:5f:bc:10:68:84:8b:29:
cd:84:b2:39:45:5a:da:33:84:8f:ab:fa:04:93:84:
e3:bb:a5:31:85:4e:de:c2:ac:a6:b7:87:c8:be:61:
c6:eb:2a:a4:57:83:5f:dd:01:a1:70:27:18:97:39:
e5:c0:90:6a:20:e0:6b:36:18:07:de:b1:55:30:75:
c8:71:db:d8:1f:77:b1:a8:02:39:68:8c:ac:a1:15:
14:27:12:18:b8:69:3b:c1:2d:83:b2:bd:a1:29:2e:
95:b4:b5:81:51:24:b0:68:ac:e9:c6:c9:31:e6:86:
5d:ec:dc:30:c8:6b:40:e4:d6:cf:b1:f3:0c:74:b8:
fa:1d:5f:16:a7:79:ec:d0:69:06:19:5c:11:6b:ea:
1c:45:e6:11:30:63:31:fd:60:f7:f7:df:b0:bd:59:
5e:cd:99:75:7a:c5:30:1c:0a:d2:30:0c:ad:78:19:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E7:7F:91:D4:96:19:12:A8:B6:41:06:BC:11:9D:B6:FC:95:BC:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
X509v3 Authority Key Identifier:
keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:46c0:816::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a7:49:af:bd:a5:d8:d4:3e:bb:ca:05:4c:19:1c:8c:25:8c:
02:e3:34:6b:3d:18:6d:fa:c6:2b:f0:a2:bf:7f:9d:c0:d0:15:
ca:0a:6d:3d:9d:4f:8a:4d:78:86:75:f8:70:f5:56:aa:e7:21:
02:e7:9d:99:f2:f7:f4:5d:53:84:3f:52:4d:c1:5c:f3:61:21:
58:34:90:69:a7:d3:a4:af:9d:16:dd:cc:12:55:89:d4:56:ef:
93:79:56:d2:53:77:de:6b:44:b2:fd:57:ad:bd:5d:e5:8f:db:
f4:ec:0e:b1:e1:1a:08:f6:11:be:3b:d5:ed:67:78:e2:1f:3f:
27:59:3d:4b:f3:5c:98:96:5b:5e:4c:9b:af:90:10:1b:7f:ee:
d2:c3:04:0c:eb:63:eb:3f:85:5b:60:0b:09:90:28:32:a7:06:
a0:89:05:57:d2:1d:60:1d:43:0f:e4:d9:e2:fb:f8:30:e9:ac:
10:e6:b0:18:9d:c7:a7:a2:7c:2a:19:26:ce:7d:d3:38:0d:5f:
37:50:44:c6:09:ca:e1:f4:49:57:0e:07:f5:81:60:fb:64:03:
17:bd:0c:56:6e:25:b1:73:d4:06:f5:fc:88:c3:f3:b7:4d:5d:
a4:ac:9e:e3:f2:43:43:fb:10:97:b6:10:19:18:35:d6:f5:92:
bf:cb:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:14 2026 by rpki-client