
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa
File: ffeedd1a-1333-3988-9802-71b64e4a1c66.roa (raw, json)
Hash identifier: 6sgkZxnApXECJWmo1XNNzW0vM8EftZNZD3nvctMP8AI=
Subject key identifier: 8C:19:02:6C:25:91:52:37:57:46:D8:B9:29:A4:3A:1D:B3:F9:A1:37
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584EA791569CF05B2D00470AA240
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 10616
IP address blocks: 2610:20:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:56:9c:f0:5b:2d:00:47:0a:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8da940b3-1f78-4ba7-9212-78c1619a68a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:2d:d2:fc:a2:66:71:a1:de:12:e1:bb:6c:
c4:c6:48:d8:bd:4a:e8:11:98:f0:98:82:0b:30:9a:
f6:04:25:ea:0f:ee:84:ce:44:be:6d:dd:98:8b:77:
de:5f:95:9d:4a:c6:4d:90:a0:e4:2d:63:36:59:d2:
a2:d2:77:70:78:4a:2e:2e:58:c8:3c:76:9e:c1:2e:
82:f4:c7:fe:c4:ff:38:f5:4e:d2:18:e6:a0:63:f2:
a6:fa:e6:0b:bc:5d:ec:3d:38:84:d2:1d:e2:a4:d6:
15:99:d3:a9:36:03:02:7b:84:37:19:f0:08:ae:9f:
1e:2c:0c:a4:92:ad:58:1e:fc:e8:dd:d7:6e:23:61:
dc:12:94:9b:48:2d:a1:91:d8:ae:7f:84:3a:20:75:
4e:5b:ab:1f:21:14:1f:04:56:37:0a:1a:29:f8:e9:
cc:bc:88:f8:26:9f:c7:71:84:80:86:76:fc:c2:1f:
3a:32:ec:67:ac:b5:7d:a2:95:8f:05:55:35:9f:fc:
92:c7:3c:dd:2b:3f:77:ed:18:88:b5:3a:ee:7e:64:
89:0e:4d:74:e4:cd:ba:42:44:db:56:fb:aa:69:f1:
9d:79:73:25:fb:8b:96:f6:f9:09:88:4f:4c:3d:8f:
45:52:cd:21:9b:6f:d5:a8:da:1b:6a:aa:36:00:df:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:02:6C:25:91:52:37:57:46:D8:B9:29:A4:3A:1D:B3:F9:A1:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:18:a4:da:dc:db:c3:2c:74:f4:5c:cc:95:cf:0d:70:4b:83:
a1:aa:43:0d:76:74:80:f1:ee:39:7c:d1:43:05:e8:e9:e0:0a:
54:16:64:0b:df:53:c1:0d:3a:89:a6:50:28:a5:e1:c0:23:07:
bd:61:bc:46:33:be:29:47:21:2e:15:49:ab:3b:db:7a:8f:03:
81:94:b3:52:29:25:e9:d3:4e:d6:cb:d3:9c:d6:64:31:2b:19:
a9:1a:f2:a0:65:7c:39:6c:91:9d:42:3c:3d:51:ad:b0:82:8b:
bf:66:b1:2d:40:78:26:dc:3d:da:86:61:36:13:52:ab:2d:79:
1d:fa:f9:b8:f8:23:cf:dd:00:26:91:b6:fd:54:3d:f4:66:65:
65:17:29:12:5b:1b:ea:d6:e3:c9:d7:a3:0d:74:3d:8a:cd:64:
de:5c:12:20:0f:4a:83:23:17:c3:e3:7b:39:22:85:91:83:b7:
60:54:bc:2c:06:ba:96:ae:01:73:f9:e3:9a:8c:80:a9:ca:f5:
47:97:dd:b4:22:1d:9a:6f:41:ca:c0:83:b0:14:89:e2:0c:f0:
e6:6e:13:79:72:90:5e:86:2c:8d:66:d4:a1:89:e0:b0:bb:96:
83:f8:00:3c:7e:82:58:94:87:2b:d5:a9:72:b5:8f:88:a6:1a:
b2:47:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:26 2026 by rpki-client