
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa
File: f869cbd8-4b13-3204-a71f-f9f77adaf977.roa (raw, json)
Hash identifier: TNyTLmYeHmw2Q4KgWb7RW72nn0HR8NNyNgHJ86jhG0E=
Subject key identifier: F7:0C:2B:E7:43:D1:E7:A4:C9:3B:72:82:86:25:2A:CA:66:95:2F:E8
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584E5D149CDBBDB5EC5D9B5727C0
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 0
IP address blocks: 2602:fd10:c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:9c:db:bd:b5:ec:5d:9b:57:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=c3e5d969-48c5-4fe8-917f-70928fba4bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:db:da:c2:65:0b:42:63:16:8c:c6:3b:0a:
59:a2:28:31:5e:a0:73:33:15:c1:b1:cc:52:e2:c4:
e1:31:7e:9d:f2:39:10:fb:b7:b2:1c:c9:40:70:2c:
1f:7e:9c:ad:46:f3:d0:6e:f0:34:7a:67:9e:6d:6a:
53:e9:ed:e3:1d:42:dc:ea:26:60:7b:69:6f:eb:6f:
4a:89:20:27:80:3e:ca:e9:b3:25:34:ec:f9:cd:d2:
53:7a:bd:ef:98:62:ae:4a:8a:8a:50:0e:fc:38:05:
ba:c3:a2:7b:9c:d1:57:8e:ac:f4:20:d8:54:e9:c4:
7d:2f:72:ce:27:49:9d:df:06:ab:a9:5b:1b:d4:d1:
56:bf:68:5c:5e:6e:4c:6f:33:d4:b9:5c:50:91:49:
a2:5a:82:01:b9:4d:48:0b:50:da:36:a5:c1:91:8b:
75:a2:e8:8a:25:c8:d1:1e:69:ac:34:70:0b:58:78:
a1:4b:3f:b5:04:99:7d:bc:14:17:e2:10:c0:79:15:
1b:2b:6a:56:f2:60:e9:12:d2:c1:e8:49:85:ec:08:
d0:0b:ec:f0:d5:74:6e:62:d7:97:7b:72:1a:d5:25:
a8:60:d9:e0:3f:8e:fc:3d:a9:6a:7d:a3:19:32:1d:
2a:20:4e:e1:e8:99:fe:a2:db:64:42:eb:47:98:3e:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:2B:E7:43:D1:E7:A4:C9:3B:72:82:86:25:2A:CA:66:95:2F:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:c00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:6a:e1:60:0b:76:67:d0:85:fa:ed:b8:9a:65:17:b7:f3:ef:
ef:bc:33:2e:f6:ab:fe:34:4c:8b:c6:f0:f4:f3:47:5e:cf:56:
02:4c:2f:db:1f:1d:2c:28:33:ec:72:a2:d8:05:12:21:e7:dd:
cf:a9:c7:78:ed:6d:43:a9:01:9f:1f:55:ea:68:8b:db:81:28:
c4:d4:20:4e:00:e8:14:7b:73:ad:4d:ed:b6:c3:2d:13:43:ab:
3d:d1:1e:92:2c:30:4c:cc:c9:dd:92:c1:b1:28:f2:90:79:b2:
e6:7a:82:dc:7d:2e:a1:4f:f8:9c:c6:f1:04:d0:99:ca:25:e3:
76:47:ef:8c:e4:d0:f8:30:93:44:0e:85:d6:dc:42:d6:82:c7:
bf:ec:5c:4d:38:aa:b9:ef:18:ca:b7:b5:f3:c6:74:b0:c8:37:
e3:81:23:5f:ca:48:00:c6:98:d9:45:65:a9:0c:fb:68:cf:fa:
34:c8:cf:7a:67:2c:fc:46:20:31:50:34:4a:ec:3a:85:42:1b:
78:7e:5d:f3:7b:eb:df:f6:c3:07:c5:90:8f:e3:ce:82:15:91:
91:46:5b:96:32:5f:09:a0:54:fe:3b:34:98:5c:a3:1f:9c:e7:
70:bb:72:d6:40:44:4e:56:89:73:e9:49:e2:35:5a:b9:93:22:
26:9c:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:49:23 2026 by rpki-client