
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
File: 14ccf9e3-3501-3d49-b394-7e1405d6383d.roa (raw, json)
Hash identifier: VW2retpqZ+am/h+nAGhwL3P/VsK31tbyBEadqZkax7A=
Subject key identifier: F8:1F:B8:BB:AF:A9:04:1F:08:D5:F0:5B:D1:9C:F5:F1:F2:D5:79:CD
Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial: 010D0C9F4328584EA78774C0087324491E5DDD00
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 62563
IP address blocks: 2602:fec3:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:74:c0:08:73:24:49:1e:5d:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=443c14ae-7812-48e7-8b34-960e1ec87f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:a8:51:e2:cf:e2:3c:13:9e:6a:d9:ed:36:
bf:7c:92:a3:82:15:59:d0:19:66:0f:db:ff:fa:40:
86:7b:da:95:fb:b7:60:d9:ce:1d:17:63:07:fe:d8:
23:78:ce:3e:f6:a8:78:58:51:03:21:c0:e9:d0:39:
49:34:dc:2d:56:71:7c:f3:cd:a8:3b:66:6c:20:b7:
d4:09:f4:79:b1:53:98:ae:ec:1e:0b:5e:05:1f:d8:
7d:cd:13:2a:84:66:53:51:cd:5e:eb:e9:b6:80:bf:
a0:56:2e:89:42:15:40:a4:c1:db:e5:37:72:a7:04:
88:b7:f8:07:68:da:65:d0:b7:e3:9d:a5:40:fd:01:
25:23:2b:f2:7b:d8:33:bc:4b:76:ad:35:76:47:62:
7c:f7:51:b0:0c:f0:2c:af:14:12:be:2f:c1:c2:d7:
73:49:e8:67:d1:57:9c:3c:f3:2c:5d:e8:c5:e4:8b:
1a:dc:14:fb:45:66:46:86:d0:22:62:65:a5:0a:08:
8e:24:af:e1:6a:2d:49:1f:b8:ae:6e:68:04:ca:d9:
97:f2:72:ec:1c:9e:bd:3e:ee:ad:48:03:12:43:8d:
75:e2:ce:f1:90:38:ff:e0:47:45:ae:84:9c:9e:7c:
99:21:0e:5a:39:56:61:e8:fa:09:22:fa:ea:cd:9a:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:B8:BB:AF:A9:04:1F:08:D5:F0:5B:D1:9C:F5:F1:F2:D5:79:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
X509v3 Authority Key Identifier:
keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fec3:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:64:c4:32:58:76:d7:2a:f6:f6:56:9a:ee:cf:1d:cb:64:ae:
5d:a6:69:a4:8f:5e:8a:93:b2:dc:3b:cd:11:72:49:b0:d4:91:
eb:17:8f:3f:d9:e0:79:0c:16:ba:34:f9:34:ae:d4:ec:69:2f:
b7:8f:f0:03:49:ac:7a:25:b8:5c:00:c0:9b:bf:a5:fb:d3:8c:
d6:2b:35:be:c0:4f:3e:03:9f:0a:55:35:a9:64:ed:95:1e:0e:
c7:dd:4b:34:78:38:47:e1:10:1c:2a:ac:a1:b5:da:e5:44:8f:
54:f2:4b:40:91:7d:46:bf:fb:c4:05:9d:f6:95:f9:fc:92:73:
27:72:5e:8e:3a:4b:5a:a5:e2:f7:8f:43:af:f6:79:09:12:51:
17:4a:84:f6:90:1f:53:a4:d2:dd:d5:69:f5:a7:82:94:fc:de:
0c:f7:53:c1:3b:70:ad:fb:23:88:55:a6:56:a2:40:db:d9:f6:
84:14:82:21:e6:32:d1:d1:8b:5f:fa:2c:0c:52:73:fa:ad:f1:
a0:cb:03:ce:f3:f4:23:ad:09:bb:73:62:04:52:4a:86:0e:ec:
07:ae:73:92:59:00:d2:b8:ac:58:b3:2f:0f:5f:74:96:88:c1:
78:5f:4c:04:45:b5:ee:16:83:93:11:4a:76:0f:16:de:b9:91:
12:bd:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:44 2026 by rpki-client