
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File: 970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier: RO7LTbMJssNLtc9Ckek6mdii9nh3c3xnGii6etBfRPM=
Subject key identifier: C8:19:C3:5D:6E:A0:CE:D1:5F:C0:DA:F8:06:B6:79:40:8A:C8:66:5B
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F4328584EAD1C4E6A8D1CC24F486AB480
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 10390
IP address blocks: 2620:10f:400e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:4e:6a:8d:1c:c2:4f:48:6a:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=11975bea-6479-4368-84ea-a15f2a7722f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:68:f3:42:0b:67:46:3e:c3:d7:22:1a:0d:
07:84:3f:64:28:af:1e:0d:40:90:26:d6:d0:96:2a:
17:0d:c0:3b:76:a3:01:56:94:7e:bf:9d:f4:38:26:
b4:34:68:52:22:40:77:7c:21:16:9d:eb:df:c2:f2:
7f:d3:9a:20:58:75:de:27:32:6d:b3:dc:98:54:5e:
b1:cd:39:3a:5e:e7:64:d2:f0:82:82:73:f7:95:7f:
ec:31:8f:28:31:9c:05:be:2f:55:92:a1:65:18:db:
f5:bf:8d:09:d7:eb:d8:2f:bc:80:01:85:60:5d:c0:
67:df:ba:8c:80:d0:d8:63:1b:ee:a4:75:9f:16:a6:
a0:02:d8:4f:5e:2c:ec:7a:a7:39:2a:c5:94:26:09:
b1:c6:ae:1f:ea:ae:b8:6d:59:8d:58:96:05:71:c6:
3c:99:32:c3:eb:63:47:a5:98:19:d7:d4:27:19:4b:
f5:27:7b:ea:23:e3:f8:59:54:f0:4c:8d:2d:f7:67:
60:3f:b2:5e:82:27:de:5d:05:50:be:f2:0a:b1:de:
07:d9:e1:a2:bc:80:78:66:31:8e:ba:c2:34:39:ce:
8d:75:f9:a4:11:68:80:91:78:ea:df:40:ac:f5:f1:
e8:fb:82:76:f6:40:22:9e:b0:f0:d5:34:68:c5:4a:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:C3:5D:6E:A0:CE:D1:5F:C0:DA:F8:06:B6:79:40:8A:C8:66:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:400e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9c:9e:ee:fb:a5:f6:48:ce:74:a7:e3:60:a4:ea:30:be:c9:
1f:74:d5:10:55:1c:60:95:76:26:1e:2d:87:04:09:17:1f:e8:
b2:2f:47:f2:0a:67:4e:42:5b:eb:f1:a8:0e:bd:69:72:af:0d:
81:5f:c5:21:0c:ad:b5:a9:02:e0:8d:d8:a4:c1:32:d6:b0:09:
45:0f:75:05:d8:68:48:65:ec:4f:9d:4b:0e:16:1b:5f:2d:b9:
89:e7:95:85:8d:62:af:7d:64:c6:12:f7:07:4e:ed:ac:6b:fb:
d8:e3:53:65:2f:4a:94:87:b1:e7:e4:cd:3f:b6:e0:86:49:20:
0b:22:9d:ba:b7:f5:f9:68:c2:c0:0f:a9:6a:27:bf:e9:20:b6:
96:69:44:c2:bb:e5:33:c1:9f:0c:0d:30:3e:f3:10:4b:df:75:
99:51:a9:43:f2:76:a0:f9:8d:86:9e:34:cd:6c:77:57:30:fb:
3d:21:ec:66:da:a0:da:b3:89:be:8c:63:28:86:e9:2a:a8:2c:
bc:ce:40:3c:15:71:eb:22:f3:02:ea:66:e9:ad:0f:87:db:1d:
8a:f7:35:5d:06:ed:d8:1f:1e:11:b2:48:4f:19:9e:1b:1e:82:
c8:86:e9:96:1a:ee:26:e3:20:92:2d:39:a2:05:80:bb:01:13:
8b:b6:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:23:37 2026 by rpki-client