
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json)
Hash identifier: nzMnm/GZluNCKFNq6EDqk8sz19JthakaEzIJv1Y5vdU=
Subject key identifier: B6:24:54:7D:CF:45:B5:21:2F:97:43:8E:26:DF:0A:89:C6:8E:AA:E1
Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial: 010D0C9F4328584F1CC7A939B878D51EA7E31168
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 0
IP address blocks: 2001:504:100::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:a9:39:b8:78:d5:1e:a7:e3:11:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=c3e1745d-013e-4a89-b140-f6f8b3132949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:75:f4:d2:f3:fc:ba:19:23:87:fc:f1:07:
a6:7b:fd:3f:31:12:d7:fe:a0:29:41:df:ab:fa:9f:
1e:2a:82:0d:f9:09:ec:89:67:4e:64:84:8b:1e:23:
8f:d8:93:f5:2c:31:b8:ef:88:82:57:13:a5:de:7c:
54:2c:6a:ac:cf:5b:4a:ce:6a:87:5f:fb:64:ba:99:
13:7b:c9:d8:6d:27:88:f1:bf:b4:98:43:93:9b:78:
10:b8:9f:ad:69:2e:89:d1:f5:ef:f5:49:15:34:03:
14:cb:c2:ab:df:2d:11:37:03:0f:13:0a:b6:a0:af:
96:2b:26:aa:f8:d2:3a:c9:cd:f8:10:04:44:8d:c0:
dd:08:7c:00:a7:2e:e5:6c:fa:4a:05:f0:ce:47:3e:
de:e0:c9:cf:5f:1c:b8:ff:31:a0:6e:4a:80:88:e9:
26:a8:be:79:d4:ae:2d:e9:6b:03:f9:16:cf:27:04:
db:2e:14:d5:b2:cb:52:81:15:44:fc:55:da:27:29:
85:06:ee:e3:08:9f:9e:f6:84:5e:0c:52:a6:6f:07:
67:db:fd:46:48:3e:49:51:89:fd:c2:c8:3f:cb:ae:
ac:7e:5f:1f:78:1f:ca:5c:85:eb:1c:30:c6:b9:32:
7b:1d:eb:26:c3:77:cb:15:37:cb:ed:6f:c2:63:5e:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:54:7D:CF:45:B5:21:2F:97:43:8E:26:DF:0A:89:C6:8E:AA:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
X509v3 Authority Key Identifier:
keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:a0:86:78:33:f4:9d:df:4e:fb:0f:72:06:dc:65:04:30:81:
30:39:9c:c2:85:24:55:c3:0b:60:b3:72:88:a0:49:55:59:45:
f4:71:15:56:fc:87:96:53:24:44:2e:7f:f6:ff:f9:30:f7:4b:
59:1d:39:88:51:0b:71:c6:60:bc:37:c7:b0:28:b1:5d:76:46:
4a:89:12:d6:1f:d0:83:8f:24:c9:c6:2d:34:09:b7:2d:e8:47:
e9:10:fc:1c:43:79:d6:8e:54:fb:5a:6a:60:d0:d7:7f:21:9b:
d5:70:94:50:c1:93:b1:b7:01:65:20:86:3b:c5:7b:53:b7:78:
bd:b5:08:9d:63:72:9a:b9:2b:7f:f7:66:85:51:f7:00:ea:a5:
16:90:47:a1:9c:9b:a4:b2:2a:b8:3c:27:2e:70:83:dc:bb:f8:
15:80:e8:0d:32:df:20:c0:05:1f:6a:e4:c8:ad:ac:5b:34:1e:
1c:a6:77:1a:16:44:76:7f:db:f0:c7:07:85:6b:fa:20:76:bf:
1c:27:29:b6:5d:d1:0c:03:06:ee:e4:d6:97:6b:19:7b:64:4e:
f8:24:e9:e2:2c:cf:c4:c2:79:10:bc:84:60:25:d9:a8:4e:06:
ce:b6:30:1f:97:e4:69:bd:8f:cf:39:f2:3b:33:bc:78:bd:88:
90:08:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:55 2026 by rpki-client