
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b1ea94-c8f5-3882-8f03-2d720f4a712e.roa
File: f8b1ea94-c8f5-3882-8f03-2d720f4a712e.roa (raw, json)
Hash identifier: 1hkvhjijzVOKgB97HJEa9InmpwV4Qr/Yb4ShoLk2L+Q=
Subject key identifier: 86:A5:DF:69:00:82:5F:9C:E9:E2:B8:43:7A:35:73:04:E1:27:CB:44
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F5FC805081FA0A59DBC2F3F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b1ea94-c8f5-3882-8f03-2d720f4a712e.roa
Signing time: Sat 03 Oct 2026 01:00:12 +0000
ROA not before: Sat 03 Oct 2026 01:00:12 +0000
ROA not after: Fri 01 Jan 2027 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2d80:2600::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:c8:05:08:1f:a0:a5:9d:bc:2f:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:12 2026 GMT
Not After : Jan 1 02:00:12 2027 GMT
Subject: CN=4b7bb29c-272c-4067-b10b-859f2c0d103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:96:76:c0:2d:0d:74:07:50:04:81:d2:cd:
14:da:9c:5e:f0:58:9c:cc:a9:5b:f3:6a:53:79:71:
c2:2e:42:6a:9b:7e:1f:b7:c0:b6:cb:22:a3:d7:02:
eb:23:d0:50:45:b9:fb:f0:bb:c8:96:cc:24:b5:5a:
d5:89:0f:a4:20:e2:cd:29:c1:79:4b:d8:ed:8a:ea:
9a:5f:60:97:df:e6:14:93:9a:7b:a0:01:06:96:f9:
84:e0:dd:6b:4e:e1:58:c8:61:53:ba:38:8a:cd:a0:
76:7f:5c:06:c8:e3:7e:83:e0:d5:af:94:b2:b0:4b:
5c:e7:17:d1:9b:94:43:c5:fb:dd:ce:1f:6d:e9:08:
c0:78:18:d5:f9:85:89:c0:b6:3e:19:6e:9f:99:e5:
4f:44:7b:e9:c8:a5:9b:e3:06:7b:4a:c2:ed:27:45:
8d:1b:92:67:c8:2f:ae:9a:31:01:15:1f:cc:7c:2a:
ed:d5:68:e2:14:8d:5c:b6:fe:d9:22:df:60:3b:29:
68:83:3a:07:c3:d3:f9:7c:82:0e:f7:17:df:f5:91:
69:7a:e8:63:d8:ef:a6:10:7c:05:dd:85:40:26:95:
70:4f:9e:7a:4b:aa:46:30:ca:37:52:fd:77:da:01:
ef:78:b2:c8:0c:37:33:17:71:ca:83:ce:97:8c:fb:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:DF:69:00:82:5F:9C:E9:E2:B8:43:7A:35:73:04:E1:27:CB:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b1ea94-c8f5-3882-8f03-2d720f4a712e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2600::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:cc:af:e4:eb:c9:5b:fd:a8:93:2d:c7:05:7d:12:48:92:73:
a1:30:e5:76:2d:06:5c:34:38:07:3a:d3:2d:cd:f9:ca:ed:03:
71:45:a7:98:2c:92:f3:6e:3f:37:3a:8d:b1:e2:e0:7d:5b:ee:
19:4f:b3:6c:72:f1:00:ee:b5:b8:3e:c3:b3:b7:13:e5:30:b6:
f7:bf:71:09:4f:04:a0:29:9f:88:9e:de:5b:23:00:e0:d0:68:
a7:d2:9f:41:aa:bd:ed:dc:4b:30:9b:82:d5:96:21:a4:61:d1:
7d:08:1e:cd:16:63:7c:6f:72:ce:59:0e:e0:3c:bc:79:72:9a:
ca:18:4a:de:aa:6b:78:55:59:30:bb:1d:b7:13:94:2a:5d:8d:
45:ff:51:9d:82:69:e6:0e:6e:f6:1f:29:ad:5b:94:57:03:d8:
d2:8b:9d:75:63:5f:6a:58:fd:a1:ae:9c:13:ee:96:0c:5a:0f:
81:99:9f:ff:ae:a0:00:49:2f:38:4a:14:40:17:c0:ef:3d:43:
e9:0e:9f:b1:76:e9:d8:dc:7b:c1:e6:d0:6f:de:6d:43:7e:fc:
27:81:0f:c1:27:36:1e:c1:67:3e:64:1b:0f:10:37:1a:e7:b9:
9b:d6:9e:12:ea:22:79:69:3d:2c:89:17:09:a3:1b:4e:71:45:
be:c4:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:35:52 2026 by rpki-client