
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa
File: 985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa (raw, json)
Hash identifier: 4cRRDN1NKT0kseW5uS/Inqy/WiANKQX/r51dZzTNjZw=
Subject key identifier: 84:0D:6F:76:2A:0D:93:99:3E:C6:97:51:4A:CF:30:18:03:17:69:52
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F4328584EA3DC462EF4181DCF37F08700
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa
Signing time: Mon 27 Jul 2026 17:29:06 +0000
ROA not before: Mon 27 Jul 2026 17:29:06 +0000
ROA not after: Sun 25 Oct 2026 17:29:06 +0000
asID: 16509
IP address blocks: 2607:db00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a3:dc:46:2e:f4:18:1d:cf:37:f0:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Jul 27 17:29:06 2026 GMT
Not After : Oct 25 17:29:06 2026 GMT
Subject: CN=e7dd8292-470b-42ec-90ff-f48104ebe5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:16:c4:c3:00:54:d1:a6:51:23:4b:67:17:
d8:41:46:23:23:0d:bd:1d:1b:38:17:cd:e0:da:a1:
03:95:e3:4b:84:a9:77:14:89:5c:31:9d:2e:f9:ce:
a6:e5:58:2e:31:e9:00:21:01:6c:5b:a4:a0:65:87:
92:c0:96:29:5d:b6:bb:77:49:94:2f:6e:9b:34:92:
90:85:7a:a7:76:cc:67:3c:42:b4:e7:3a:5a:48:ff:
f5:77:78:16:08:2e:08:2f:4f:76:c4:28:60:1f:f9:
95:c3:77:8c:66:e2:36:4c:f7:88:6e:18:ec:ee:35:
76:cd:fa:da:55:4b:76:f6:3e:cb:d7:88:b1:2c:e3:
26:3a:79:17:1e:b4:a2:36:71:26:56:7c:eb:ed:b7:
ec:0d:a0:f2:29:9a:cc:cd:a2:a3:7e:1a:dd:57:41:
f5:25:fa:f8:eb:db:a3:e5:ed:e6:31:24:74:b1:42:
bc:43:ed:7e:eb:40:8e:00:e7:ab:c1:cc:dd:63:94:
c7:99:65:60:e8:78:bb:b9:8a:af:85:b6:0f:2e:06:
cb:4f:31:70:e3:28:49:09:2a:6e:2a:8d:8d:fd:c6:
ec:ad:b7:d8:28:26:7f:81:12:34:67:83:59:14:c0:
02:8b:b3:87:4c:13:00:b1:cf:89:3c:0d:9d:0e:05:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:6F:76:2A:0D:93:99:3E:C6:97:51:4A:CF:30:18:03:17:69:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:db00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:4a:3a:88:3f:94:d9:b4:f3:0c:98:14:da:97:47:18:63:3e:
78:a5:f6:c1:32:f5:20:71:ff:14:9d:c7:8c:61:32:9b:04:77:
a6:a7:27:02:87:82:92:75:06:0c:30:3d:e1:82:e1:f5:51:2c:
16:86:59:a5:40:1e:bb:05:d4:1a:e6:3c:67:ee:c5:e8:47:68:
36:c2:e5:51:c3:8b:19:14:43:c0:28:b9:68:44:35:70:b6:df:
91:c6:2a:8a:fc:66:62:e2:f4:e9:af:9e:3a:40:3b:1f:f9:a1:
85:c1:19:04:e6:13:84:13:7b:8f:13:4e:df:d1:a5:e2:49:91:
6d:e8:ee:7b:a8:6f:9a:d3:df:f6:d1:a7:4d:30:a3:21:9b:73:
40:1b:c0:85:49:92:56:29:9a:1d:f3:83:f3:a6:28:06:c1:79:
88:d9:cd:86:95:de:13:65:da:a5:43:72:b3:77:a5:85:8e:be:
8b:d8:e9:b7:4f:56:e3:0b:93:6c:d6:ae:b8:56:80:f4:a6:13:
16:ab:61:a8:16:7c:01:c4:c7:fd:6c:4c:3c:46:e7:6b:f1:0e:
2b:9b:8c:d8:1a:70:e4:e5:5e:cb:b2:63:4c:68:6d:26:29:ac:
ff:17:68:b3:ba:f0:91:74:b3:75:8e:21:a7:e9:61:96:ec:08:
bb:0c:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:19:14 2026 by rpki-client