
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
File: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (raw, json)
Hash identifier: BoNVQfY2ejM7V6oAHjeG42Xh/fXRbEHHgm8wyeS5yE0=
Subject key identifier: 2D:94:83:C5:16:67:BF:D8:87:00:C3:E6:52:48:3C:57:33:8A:C2:E8
Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665
Certificate serial: 010D0C9F4328584EEA8756944414176B95A2B4C0
Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 395400
IP address blocks: 2604:49c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:56:94:44:14:17:6b:95:a2:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=7a354d81-09f2-4570-a643-eadeef70c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:90:3c:cf:6d:58:fa:7d:f0:8b:dc:c3:94:
16:39:11:a1:77:7d:ee:55:b6:0d:a0:6a:97:bd:6a:
87:e1:2f:b4:0d:22:5a:ee:3f:67:f1:5a:cb:d5:ba:
97:78:11:57:1d:ad:4f:f2:cd:bd:62:82:75:3b:b5:
23:82:94:60:e1:56:7d:20:27:9d:7f:d9:79:92:8c:
e2:42:91:40:d3:7f:7a:30:3e:3d:25:0b:6e:d4:0b:
70:cf:24:50:27:98:6a:9e:ee:f4:ab:9f:38:a2:dc:
f7:43:ce:5f:0b:16:09:68:08:b2:71:e8:4f:5b:d8:
4e:0b:44:aa:0b:c5:47:76:6c:b1:b3:d3:23:2c:48:
0e:20:88:b9:0c:9b:29:50:fc:58:3a:7a:af:88:3d:
5a:71:37:89:52:8f:be:71:eb:fc:88:7a:65:09:c3:
75:ce:7a:d8:6d:e1:bc:7c:f6:ca:4a:9b:44:1a:3a:
80:9e:e8:64:c4:28:77:f9:72:d1:01:b2:e9:86:61:
66:77:62:22:0a:f3:70:cd:bc:55:be:29:97:c1:92:
7e:19:6a:de:ef:e1:89:8d:ba:0b:c6:42:e7:8a:cc:
ea:5a:40:ac:b7:9d:0a:99:7c:59:f9:d6:d3:ff:ee:
8e:72:d2:54:35:eb:51:89:dc:cb:0d:80:3f:da:c0:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:83:C5:16:67:BF:D8:87:00:C3:E6:52:48:3C:57:33:8A:C2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl
X509v3 Authority Key Identifier:
keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:49c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:3c:32:59:17:43:46:54:23:5c:10:2a:f9:45:33:f9:c4:c4:
38:9b:76:a8:00:01:e6:11:0d:b2:71:f2:04:12:21:28:bf:5d:
54:fa:22:0c:fc:df:94:81:8d:8d:30:16:8d:f5:27:17:15:87:
e6:68:f2:76:e7:74:10:50:76:e7:b8:cd:df:b3:8d:b5:6c:ce:
c6:54:7b:4c:d3:89:2e:1d:69:06:c3:bb:1b:8e:3e:4f:aa:b9:
9d:03:25:95:b5:e9:5a:1e:66:69:74:5e:f7:4b:62:9c:58:2b:
b8:f0:f3:02:f8:fb:79:05:d2:ef:d5:9c:8f:81:f9:98:1a:d6:
55:13:69:a5:fb:fc:af:86:f0:1c:f4:e2:62:8a:c8:29:d4:36:
22:c3:43:f4:0a:c6:f7:ce:7f:5e:4a:19:c2:32:8b:ed:60:90:
40:3c:24:74:49:29:df:b4:d5:d0:2f:b2:7b:ea:da:08:33:f1:
16:2d:fe:04:03:3b:3c:9c:50:84:e3:49:b1:ec:44:47:f9:46:
53:33:ab:0e:e5:88:cd:df:b9:11:d2:1c:03:4e:8a:78:a3:68:
04:e9:e7:08:96:17:0d:e0:6b:23:29:6a:2d:e6:83:a5:59:db:
56:79:59:41:be:74:6d:fc:76:8f:ae:9e:a6:77:a7:32:f9:58:
92:ea:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:20:57 2026 by rpki-client