
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
File: 3bca3994-29ef-3370-82e1-27cd8e63489e.roa (raw, json)
Hash identifier: AdHVIoOJmcxjgH6uUCHbuTjIEeMt9Fk8vk+irZTN6ag=
Subject key identifier: 6D:CB:E8:58:EE:F0:4B:6B:38:A7:7D:16:7C:0B:71:51:B8:5A:3F:C0
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584EFF7782AD5B7EC82C9FADF600
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 0
IP address blocks: 2602:fd10:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:82:ad:5b:7e:c8:2c:9f:ad:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=9d0a28a2-4671-486e-a245-bd96f35d4a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:aa:79:05:1b:be:df:86:02:0e:46:61:53:
96:45:ff:2f:08:4e:2b:84:1d:f4:00:6a:04:57:f4:
e4:48:0f:19:73:22:f7:47:0f:99:84:c6:1e:8a:f3:
4e:1c:99:3e:df:b2:40:09:22:15:09:f5:d6:77:a3:
20:3c:2c:7e:86:23:87:5c:f2:3f:1f:1c:0f:6a:66:
9b:01:e3:10:fe:ed:f1:1c:2c:37:78:92:4f:08:8f:
d2:5c:39:cc:91:23:46:0d:84:06:56:fd:d1:82:21:
51:cb:62:64:d6:1c:20:22:5c:2d:bc:d1:04:a8:17:
2e:ea:cc:99:17:8b:18:bd:32:49:64:ed:0c:de:f5:
b6:d0:b5:dd:80:00:13:58:9c:1f:ee:ff:3b:35:4b:
46:88:a9:66:fa:cb:52:a0:f3:e4:24:25:95:29:5f:
16:cb:cd:f4:a4:8a:31:47:7f:da:9f:2b:7f:4b:69:
a9:e0:47:44:64:c8:c3:c5:94:09:09:96:b1:b9:28:
20:a5:b7:de:26:da:23:1a:bc:1a:6c:2a:84:7e:bb:
3d:6a:54:04:bf:6a:80:12:63:01:6b:41:d8:34:0f:
4c:88:3d:bd:c6:b2:91:72:10:34:b6:cc:7e:8d:48:
d2:d7:43:b3:9b:fd:32:f7:15:80:e4:7b:0d:44:17:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:E8:58:EE:F0:4B:6B:38:A7:7D:16:7C:0B:71:51:B8:5A:3F:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:cb:89:e0:b1:10:73:71:48:98:f5:f9:4a:4c:67:ab:37:39:
c9:f7:0d:fe:b7:44:81:f2:f0:44:cc:19:45:b6:40:05:9a:d8:
e9:f8:1c:d0:88:ca:92:c3:be:23:3c:64:92:4e:40:bb:59:90:
bf:ca:8d:fd:6f:0d:34:7c:52:0e:4c:fd:07:2e:d7:05:e1:f9:
2e:4e:4f:fc:5d:9c:e8:b5:29:8a:83:0a:28:03:d2:db:3c:62:
9e:4b:51:ae:ca:45:f7:6e:af:c5:68:d9:26:6f:16:d6:b2:da:
c0:ed:5e:b3:07:09:7b:87:26:84:f9:cc:3d:d3:43:29:df:c3:
a1:5a:51:b6:54:15:89:bb:a5:48:05:30:e4:7e:d3:08:4f:6f:
df:31:aa:fa:23:1b:53:07:41:32:57:6c:79:b5:9a:f2:50:f5:
3b:86:2c:b9:0b:ff:ab:4e:1c:05:7b:32:73:af:36:a4:b2:b5:
e1:5a:43:7c:3c:f5:d5:85:61:47:c5:6b:4a:d1:7d:1a:63:23:
39:02:74:ec:0e:67:1a:c2:7b:4a:b5:ba:38:a2:0f:82:54:51:
77:5a:56:94:98:75:d6:ce:eb:60:7a:96:5c:96:67:eb:a2:18:
82:5f:bd:9e:3d:4b:56:14:1f:47:1e:71:c8:7b:76:7e:c7:b2:
af:45:75:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:25:18 2026 by rpki-client