
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
File: ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa (raw, json)
Hash identifier: bIPZuGUQkpO3cDLPiPVe8UodEZsPATFM+KBrYfcZZmw=
Subject key identifier: BF:1C:12:17:16:8F:14:5F:DF:AE:94:76:53:C6:40:89:62:75:42:BE
Certificate issuer: /CN=00c081d9-ab0e-4270-b0f1-227e8a595105
Certificate serial: 010D0C9F4328584EF8247D9DCE5FB69E5EBA56B8
Authority key identifier: EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
Signing time: Wed 26 Aug 2026 22:02:30 +0000
ROA not before: Wed 26 Aug 2026 22:02:30 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 401315
IP address blocks: 2620:cd:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:24:7d:9d:ce:5f:b6:9e:5e:ba:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c081d9-ab0e-4270-b0f1-227e8a595105
Validity
Not Before: Aug 26 22:02:30 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=0d20ce94-2a3b-4772-85a3-14443bbc4f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:04:82:23:e2:65:43:25:7e:7e:57:a0:bf:
0a:11:aa:26:27:5d:c8:ba:64:5a:54:52:b8:49:96:
5d:a3:d9:85:18:02:6a:6e:cb:b5:95:33:3e:cd:a4:
f6:1d:43:d2:86:7c:8e:28:1f:3e:6b:bc:ab:73:58:
3f:86:a3:40:15:1e:89:16:de:76:6a:b4:25:ab:20:
08:00:89:b2:0e:e2:9b:8d:8f:f4:a3:b0:67:e5:90:
5d:05:eb:c6:f2:06:d5:85:75:9f:8d:b8:d1:5e:d2:
9d:80:09:e8:e4:1b:17:36:ec:54:0a:1b:f7:eb:8b:
82:dc:42:f2:3f:2d:6b:67:85:29:a9:db:f1:83:ee:
9c:f1:ed:f4:9d:38:33:12:6c:e8:03:73:5f:9e:ba:
3a:fa:37:b8:8c:1f:5f:50:38:9b:b7:16:09:23:49:
3f:78:bc:23:59:03:8f:4b:11:18:cc:77:d5:c0:51:
d3:42:23:44:f6:95:1f:cb:28:82:ba:61:91:04:ac:
33:52:86:5c:b4:30:b3:70:d2:77:64:f1:b7:b2:50:
e4:69:98:8c:93:dc:6c:c6:61:1d:19:ac:82:d8:42:
b9:e1:57:36:e2:5f:37:77:18:bf:1c:91:23:23:5c:
b4:88:8f:da:f3:b5:8d:08:78:bc:c7:be:3e:1b:9b:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:12:17:16:8F:14:5F:DF:AE:94:76:53:C6:40:89:62:75:42:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl
X509v3 Authority Key Identifier:
keyid:EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:cd:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:50:94:28:31:e9:64:ab:f4:83:42:fd:bf:f5:79:c3:a9:df:
bc:dc:c0:6b:9c:bd:fd:7f:60:96:5f:6f:f1:cb:cd:ae:9e:9c:
fc:9c:a8:43:d7:5b:1c:67:5d:83:42:35:58:2b:f8:5e:b9:29:
d6:8f:77:ba:9c:a5:9f:c5:41:5f:df:5c:84:be:8a:bc:6b:70:
93:c4:ae:63:47:d6:b0:b8:81:8d:a7:d3:6e:05:96:c7:04:89:
5e:85:ff:a0:62:aa:40:88:7a:80:a7:0b:3e:99:ba:b9:4d:98:
79:70:b2:80:d1:1f:04:e3:8b:ea:73:28:4d:fe:5a:a3:6b:76:
38:ec:4b:5f:2f:02:53:d4:bf:5a:1a:e0:cd:7b:ef:32:1c:fa:
62:63:61:1e:21:b5:5a:6e:3b:32:b1:75:36:46:55:ff:95:86:
3d:fa:2c:54:44:95:0c:61:72:2f:00:0e:cb:e7:69:d9:9d:11:
4d:64:7f:87:d9:3d:fe:d1:83:90:4d:0f:d1:38:d0:20:b3:ac:
be:62:1e:74:11:26:21:60:b6:77:7b:7c:ea:5a:81:53:4a:e7:
9c:ef:99:c5:d3:49:b7:a0:d3:52:be:10:3f:78:57:d9:21:a8:
4a:4f:87:78:4e:80:c7:74:b8:75:d5:98:6f:97:46:63:78:b0:
f1:31:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:43:40 2026 by rpki-client