
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
File: 4d858919-717c-34a0-af03-e397e8e819f1.roa (raw, json)
Hash identifier: AbqdsksmOvKFyIpjgrKQUU2h3J7ZjdEPBMz85GjR4jA=
Subject key identifier: 2B:EF:40:D1:F9:3A:5C:18:18:1B:B1:B5:A6:B3:1B:2D:F6:25:91:62
Certificate issuer: /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial: 010D0C9F4328584EA79981D938D0258957F48F80
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 2620:12c:8041::/48 maxlen: 48
2620:12c:8051::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:99:81:d9:38:d0:25:89:57:f4:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dc9edf4e-890d-43eb-9399-518f2836aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:5e:cb:9c:91:6b:92:7c:94:b4:05:ac:53:
15:e3:13:e3:fc:37:87:cc:83:ac:9c:74:89:5f:cb:
06:c4:92:d1:15:9f:09:fd:07:ec:7f:f9:09:2e:12:
ea:3f:21:35:28:6b:d2:29:fa:47:1f:e7:fb:56:a7:
23:82:9b:b2:50:bd:9c:39:e3:f4:3e:5c:7c:0b:34:
78:85:87:0c:3a:eb:68:33:40:d2:38:e5:79:6d:6d:
13:3f:93:f4:95:99:c0:31:5d:fe:cb:1f:6a:63:fa:
1b:1b:46:0e:ba:d1:0e:db:1d:ef:32:95:19:a0:8e:
cf:ca:32:1b:56:7c:08:ce:0b:7f:b6:2e:08:42:65:
3c:5c:64:ce:ce:3d:50:6d:86:65:40:ad:b1:f5:be:
33:3a:e6:61:38:54:ae:75:f0:07:68:8d:4c:44:82:
99:9d:49:1b:54:0f:8a:0c:2b:a1:c0:33:7e:72:f8:
b9:79:bb:05:8f:b4:60:65:87:e8:1a:ff:59:c0:7d:
b0:15:c3:92:e1:03:66:f6:bb:f4:51:89:ee:2e:54:
8e:9a:9f:db:56:db:a0:59:ea:be:9d:c9:2d:2d:d7:
57:35:1c:2b:f3:f2:64:12:d9:ba:f0:30:fc:2d:0f:
ec:02:ad:ee:81:da:a5:52:70:32:bd:e4:22:40:23:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:40:D1:F9:3A:5C:18:18:1B:B1:B5:A6:B3:1B:2D:F6:25:91:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
X509v3 Authority Key Identifier:
keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12c:8041::/48
2620:12c:8051::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:bb:f9:4a:25:ef:6e:45:9b:51:23:92:b4:9d:70:ab:e5:ae:
bb:95:fc:6a:52:50:4e:8a:38:13:8c:14:b2:96:af:74:c1:e0:
e7:38:c8:2c:2b:5e:bf:08:fa:ee:55:1e:9e:06:98:05:38:da:
77:07:9e:13:9e:07:23:28:a1:56:96:34:a2:a6:5b:92:24:4e:
be:19:1f:31:b3:b6:e9:24:46:3b:8e:56:6b:5b:3b:bd:fd:14:
36:22:35:18:bf:11:9d:44:19:90:ab:09:3d:b3:79:a1:b7:1a:
df:09:fa:81:7a:36:7e:2f:f2:0c:33:af:5c:00:3c:45:09:0d:
c7:37:7d:e0:0b:64:04:39:a0:16:14:cd:1d:6e:df:94:62:3e:
04:a3:4e:e1:3f:ae:8c:4b:5f:63:29:e4:39:aa:b0:00:35:e4:
82:01:ef:dd:84:2c:bd:8f:e8:d1:03:35:8f:6b:6e:95:b1:f2:
82:7e:25:d7:2c:e2:71:cd:af:46:9a:d2:a0:33:7b:b6:3b:44:
53:79:92:a2:c5:06:93:e6:14:88:4f:60:92:f9:6c:b8:d1:44:
9b:85:3b:bb:bb:d7:a5:82:a1:87:45:2c:b4:ec:f5:be:d3:17:
c6:f8:24:e9:f5:c2:57:d2:b5:1b:50:96:b9:a6:3f:a0:82:b8:
ba:5c:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:58 2026 by rpki-client