
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa
File: d493412e-622b-3093-830c-0325f319e065.roa (raw, json)
Hash identifier: Awh5gvylSUhr7S8b1F+rnZwTILjyB3R2qMjIxC4cH00=
Subject key identifier: D6:14:0E:A9:FC:FE:E6:09:99:AB:D5:18:23:F9:28:E3:1E:38:96:94
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584EFF77856AD8E43E04713B2F00
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 0
IP address blocks: 2602:fd10:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:85:6a:d8:e4:3e:04:71:3b:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=03244fe1-ae9b-4439-b7f5-1cd769704293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:16:2b:19:9d:cf:d8:46:47:7e:89:14:0b:
e7:0e:66:15:ec:57:94:c8:37:70:a6:4d:09:b5:90:
73:da:a7:f1:0d:53:07:c6:8d:0c:e2:c2:7d:32:f3:
61:d3:a4:8e:a9:76:b1:87:15:6f:e2:01:61:f1:28:
cc:e6:d2:b3:08:2c:d1:72:27:d4:1e:a3:4e:0c:61:
90:41:2a:d2:3a:30:c5:20:02:f5:95:85:56:67:08:
42:18:b2:b5:a8:b1:8c:38:67:0d:8e:10:55:bb:bf:
4a:16:8a:1e:8c:02:10:8b:f9:4b:87:81:2d:3c:dd:
75:60:0e:1a:a0:01:3b:97:40:ea:c8:ce:9e:53:f0:
6c:1f:0f:b8:9b:59:72:69:6c:8f:d2:28:4d:4d:06:
72:a8:38:6d:67:c9:34:cf:77:3d:08:d5:e3:e0:2c:
55:bc:9d:1a:ac:c4:16:85:1a:3a:91:52:af:1a:e7:
3f:64:ec:16:f8:84:43:67:b1:85:56:ad:bb:de:cf:
d6:91:d5:9e:80:70:fe:7c:18:a9:aa:45:8b:59:1e:
9d:66:71:4c:22:97:4b:6c:d7:09:4d:f4:f9:f1:87:
28:a6:85:d3:e6:94:ab:da:df:fd:ba:9b:f1:77:7b:
4b:e2:fd:c9:2e:5a:48:1c:6a:c9:2a:8b:f2:91:82:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:14:0E:A9:FC:FE:E6:09:99:AB:D5:18:23:F9:28:E3:1E:38:96:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d493412e-622b-3093-830c-0325f319e065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:a00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:0e:b7:86:6d:a1:1e:cb:39:ca:99:ac:a0:71:67:2f:91:bf:
6b:59:79:8d:03:ff:a3:ca:b4:c3:84:40:1d:db:cc:f3:fa:45:
d1:55:44:36:68:a0:c4:71:c9:23:2f:20:c7:65:2f:19:92:76:
e1:d4:27:49:7f:0a:39:a1:02:27:c8:c5:20:34:24:d9:5f:45:
ee:9a:b5:5f:d7:30:63:68:3d:ab:06:83:dd:91:07:71:a0:28:
6f:2c:99:7f:49:d1:f3:0d:16:d8:98:1d:96:0e:3a:f1:24:72:
92:43:db:cd:2e:fd:db:e3:24:93:e5:bd:ad:bd:14:f1:59:c1:
04:d2:77:00:c3:76:06:d4:a5:43:e7:2c:59:22:1f:93:cf:3f:
2f:bb:e3:b9:c5:12:53:f4:12:0d:96:dd:d1:0c:a0:a6:0f:76:
4a:11:2f:22:6b:8e:27:4d:b7:74:21:52:6b:de:42:92:b0:0e:
16:af:c3:7a:71:c1:f6:07:bf:ef:44:11:40:09:5c:79:a0:fa:
41:04:71:6e:1b:bb:10:eb:e5:40:6f:ce:81:bd:b5:2a:bb:39:
c2:d0:9b:b5:91:75:3e:7d:5a:64:af:8c:38:5a:dc:70:f1:cf:
5c:4e:6f:25:a3:56:c9:5c:b5:43:96:6d:88:af:29:35:1a:e5:
7c:6c:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:23:08 2026 by rpki-client