
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/47599c4f-d026-3bb9-8b71-4c2f48aae5c0.roa
File: 47599c4f-d026-3bb9-8b71-4c2f48aae5c0.roa (raw, json)
Hash identifier: xiSUQ7hgBan8JSIXKxA8up312yn7EhE58TrMmeBj3ME=
Subject key identifier: D2:EB:66:CD:C9:22:A4:93:85:4C:9F:83:C2:E8:59:71:9B:80:03:D3
Certificate issuer: /CN=a4f253af-de59-456e-9354-4078d22e8677
Certificate serial: 010D0C9F4328584EFA4233E8B55D054738CE8900
Authority key identifier: 81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/47599c4f-d026-3bb9-8b71-4c2f48aae5c0.roa
Signing time: Thu 27 Aug 2026 16:13:59 +0000
ROA not before: Thu 27 Aug 2026 16:13:59 +0000
ROA not after: Wed 25 Nov 2026 17:13:59 +0000
asID: 396982
IP address blocks: 2607:4240:4005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fa:42:33:e8:b5:5d:05:47:38:ce:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f253af-de59-456e-9354-4078d22e8677
Validity
Not Before: Aug 27 16:13:59 2026 GMT
Not After : Nov 25 17:13:59 2026 GMT
Subject: CN=c7d13b52-c5ac-449e-9dea-436c4c413a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:e1:fc:a3:9b:ce:ef:65:bb:c1:eb:9c:ed:
58:a3:f2:b0:8c:c3:c4:74:18:6c:85:29:0f:65:e5:
87:94:83:e0:9b:b7:ed:e3:10:81:9a:3b:2c:29:5b:
8e:6b:67:78:52:84:e2:38:16:6e:d6:85:fd:98:80:
e5:0d:ba:aa:94:ae:be:d8:9f:ca:01:8c:01:40:5a:
43:ac:a6:96:e2:a5:53:81:1a:97:ce:24:a6:c7:a3:
8c:0f:7b:c8:4c:fd:c7:0f:29:0d:4e:18:65:a1:42:
60:1c:5d:9b:50:9d:54:10:89:33:ae:00:da:aa:b6:
22:fc:a7:4f:53:bd:25:01:95:76:f4:a2:b7:6d:b3:
a1:c8:33:e4:d7:7e:5b:a9:9b:a9:af:f8:80:8e:ed:
f2:24:22:23:cb:a8:f0:38:7a:5c:6d:ad:23:b3:14:
19:ea:d0:cd:91:cd:2a:46:0a:68:10:47:7e:11:e0:
4c:95:df:6d:5a:bd:49:db:d8:7c:9a:e3:88:a8:9b:
d2:c3:ba:12:c4:4e:c9:8b:e2:c1:d3:1c:f4:2f:92:
12:fb:32:f8:3d:12:87:ea:86:74:e6:6a:d4:b7:69:
c6:cb:76:a0:81:9c:0e:bf:5a:86:71:44:2c:16:b4:
0d:51:4f:32:dd:20:6c:af:08:02:9a:a8:d0:0b:4e:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:66:CD:C9:22:A4:93:85:4C:9F:83:C2:E8:59:71:9B:80:03:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/47599c4f-d026-3bb9-8b71-4c2f48aae5c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl
X509v3 Authority Key Identifier:
keyid:81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:4240:4005::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2f:94:4a:29:36:96:37:8f:f8:af:65:3a:52:27:dc:3d:18:
d7:5b:e3:3c:71:39:8d:f2:67:f7:b9:3c:c1:74:65:18:2a:9f:
3b:8d:96:5b:9c:83:af:e3:2b:0e:d5:d9:40:2f:90:15:13:69:
06:1a:f4:56:c3:12:cb:ea:56:7c:be:61:f3:58:c7:8d:82:84:
f8:ac:d9:6b:f3:36:0c:59:dc:30:2a:d6:82:27:d6:49:68:d1:
b2:ff:0e:75:f6:ba:04:21:38:78:ea:0c:4f:7d:8d:00:b6:c0:
23:91:0a:2c:2d:4c:49:52:a2:3c:78:74:ae:54:18:7a:68:c2:
c9:15:10:cf:0a:4c:58:cf:91:96:80:b2:04:18:86:b9:fc:33:
c3:e8:95:ca:69:4f:11:c7:cb:88:8b:37:21:19:7c:ff:00:1a:
6f:06:fc:99:0c:f2:75:50:f8:a3:67:15:ab:c1:75:bb:c3:6a:
f4:8d:93:1c:ae:f3:fb:18:57:2b:76:92:83:09:b5:0a:72:3a:
1d:ee:2f:85:ff:a3:6d:39:d8:db:1a:bd:0a:c9:b8:44:e2:e3:
dc:91:a7:e2:7d:31:79:1e:c2:7b:81:5f:82:a8:43:99:8b:f6:
bd:07:4f:82:23:3e:8f:e6:ed:ef:7a:5c:ab:af:2d:85:3f:34:
31:8d:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:57 2026 by rpki-client