
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa
File: ac57ba9e-c065-36da-ad5a-6f1537123b24.roa (raw, json)
Hash identifier: +PAQlZhfNNoz9OK/kznOcfP1LtTMKjHaVSMDHNX5S4s=
Subject key identifier: 4C:73:6C:43:A7:0C:4F:89:C3:A9:35:C2:66:C4:10:68:6E:F1:52:22
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584EA6C7492FC15892D366D014A0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa
Signing time: Tue 28 Jul 2026 18:34:14 +0000
ROA not before: Tue 28 Jul 2026 18:34:14 +0000
ROA not after: Mon 26 Oct 2026 18:34:14 +0000
asID: 22359
IP address blocks: 2607:8240:ff0a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a6:c7:49:2f:c1:58:92:d3:66:d0:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Jul 28 18:34:14 2026 GMT
Not After : Oct 26 18:34:14 2026 GMT
Subject: CN=f65496b3-da7d-4793-bcfe-262b3746a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:a8:3a:67:41:8e:b4:b0:a6:5d:9d:c8:7c:
ce:8c:ce:76:b3:3a:25:18:2c:56:0e:be:6a:10:f2:
4f:b3:29:d2:96:81:d9:a4:d1:1e:59:bf:d0:fa:21:
75:e6:c1:52:27:ca:8f:b8:f9:ef:64:bc:e2:60:1d:
d5:e7:9c:d3:dd:59:40:69:06:02:07:f7:4e:59:6d:
c5:c7:5c:76:c9:aa:66:30:ea:c4:2f:73:a0:17:e9:
90:3c:e2:aa:30:0e:05:c2:b4:df:d7:ba:87:af:5a:
5f:e1:f4:8e:0d:68:9f:a9:f0:57:f4:b2:9c:98:22:
b2:3b:c4:88:c6:73:1f:b8:e9:4e:31:d4:f9:3b:e2:
56:14:ed:ef:d2:7f:b7:fe:b6:d2:82:2a:d8:88:78:
fc:58:0b:85:8a:27:a0:5e:e9:9f:c0:c8:10:a1:3e:
a8:79:c2:49:4e:46:f3:c3:80:1b:57:91:ad:4e:d6:
24:85:42:f1:94:25:0d:e0:f6:2a:ef:27:8d:05:e4:
11:78:87:b0:69:74:00:7a:88:83:7f:94:cc:6a:93:
86:a0:63:53:cb:1d:18:92:7e:73:64:b7:94:44:2e:
27:7c:2b:b6:9f:e8:88:55:0a:c0:18:6b:25:d0:a5:
26:11:7e:47:7a:de:2e:33:34:64:a9:34:7e:5f:6d:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:6C:43:A7:0C:4F:89:C3:A9:35:C2:66:C4:10:68:6E:F1:52:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ac57ba9e-c065-36da-ad5a-6f1537123b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8240:ff0a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:de:6b:c8:8c:43:fb:45:71:56:de:1a:53:ee:de:03:68:7f:
80:ea:d5:63:96:79:e0:cc:f3:67:9a:77:c5:a7:74:a8:26:b3:
be:34:17:80:49:10:ec:6c:0c:de:38:db:9b:ff:01:1e:56:e4:
0f:f5:f5:33:16:b5:f0:2d:11:32:83:fd:4b:e8:f9:ed:09:ba:
7c:5e:8d:b3:a1:a7:14:d0:1d:65:2b:26:99:c8:a2:10:f2:80:
67:e1:59:2d:2d:a3:ca:99:67:71:c4:91:d5:d7:26:4f:fa:21:
5f:17:38:02:d3:1e:19:10:bc:cb:fc:d8:bc:82:5c:a2:06:fc:
b8:41:1e:e8:94:ed:32:68:c9:78:bf:62:fa:9b:05:2a:d1:b8:
e9:fc:b8:1a:8f:21:11:30:04:05:72:36:b6:4b:c6:b2:fd:74:
70:e6:7e:87:fa:07:3b:7b:ad:0d:ec:4f:bc:2d:12:b2:a1:24:
6a:29:d1:6e:15:b0:d5:3d:6a:ad:13:75:5d:4c:ad:20:b4:24:
81:71:58:c9:7b:a5:68:04:49:40:a5:07:da:1f:e5:e4:47:4c:
79:17:d8:a7:3f:6b:0e:57:bf:7c:60:da:f6:a8:b8:0f:7f:2b:
1a:f4:3d:96:9e:bd:82:ed:20:55:38:c3:45:df:cb:81:47:f2:
1e:80:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:29:40 2026 by rpki-client