
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
File: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json)
Hash identifier: 1Fc9vclE8+dWVOkLGi5YuWCyvM0TX8wsyMxmDCLHbDw=
Subject key identifier: 35:7A:CD:30:DF:4A:D2:20:40:90:F1:C6:A6:54:A5:63:9A:15:4F:0B
Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial: 010D0C9F4328584EC7A1CC0444F8F3AE261EB680
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 395287
IP address blocks: 2620:128:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:cc:04:44:f8:f3:ae:26:1e:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=f7d36b59-1ecf-41b8-a416-3532672d8888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:fe:fb:b6:23:42:7a:d2:38:61:55:cc:af:
f1:12:8f:75:9c:6b:a3:8b:39:ff:60:1c:3c:fb:7b:
83:1d:25:c5:24:a3:e0:60:fb:dd:81:c6:38:3e:60:
c5:44:b0:a7:9d:88:e6:6e:80:42:fd:a8:e4:93:00:
e9:72:06:68:ed:a2:2a:d8:32:fb:6c:26:20:68:60:
7b:23:ee:6c:0f:01:0d:72:df:a1:f5:cf:1b:d5:73:
7c:d9:fc:95:7c:87:18:c5:3a:e4:92:2f:78:8a:d3:
e0:99:91:82:9a:ab:e9:6d:bc:a2:c4:f7:fd:2c:ee:
23:d3:78:be:96:a7:ca:da:29:be:00:97:d3:a5:a6:
fa:e7:9c:36:b9:0a:e3:b4:2c:46:f2:73:39:4d:8a:
6f:35:1c:01:37:cd:54:30:32:72:ed:51:e5:dd:97:
ac:28:30:d7:dc:b4:58:ec:10:23:be:5a:02:99:bd:
1f:fe:91:fe:de:19:17:b1:1d:b5:91:5c:79:4b:58:
76:e4:a0:67:bd:d6:8c:c9:99:55:2f:a4:8d:26:8a:
72:ac:a9:de:f2:e2:66:ff:2e:3d:1a:44:23:73:07:
fd:18:7e:bb:44:59:9b:24:6a:3a:82:e2:28:01:17:
bf:dc:c2:1f:54:e3:21:4f:b4:73:e1:3a:cf:d9:fb:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:CD:30:DF:4A:D2:20:40:90:F1:C6:A6:54:A5:63:9A:15:4F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
X509v3 Authority Key Identifier:
keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:128:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f2:5b:27:70:30:55:7c:db:6a:fd:1c:50:a1:14:1b:9b:4b:
ce:f7:af:f9:83:42:31:10:5b:be:2c:d9:7e:46:9b:ba:3c:e1:
f4:af:8b:72:70:4e:91:c4:4b:d0:17:b2:b9:25:4c:bb:75:40:
a6:05:ba:4a:68:d8:d8:2e:e0:58:e0:e2:01:98:d9:97:dd:2b:
ef:1f:13:df:08:ef:92:90:0e:7a:29:e0:80:17:ec:a5:30:91:
12:2e:de:aa:93:5b:81:9e:3d:25:a2:c4:57:61:d6:52:fc:7e:
1d:e2:51:78:4c:83:22:d5:ba:07:a6:25:84:e3:f1:07:b0:64:
30:5d:e5:89:6d:f9:02:89:08:35:26:ff:f7:f0:9e:5f:04:5c:
7d:01:ff:fc:19:f6:28:ae:92:e7:ae:93:79:6b:a8:9c:d1:cb:
94:a7:7e:a5:af:26:55:7f:52:81:45:e5:9e:a9:7f:fb:af:6b:
da:0b:08:6c:4f:9b:a2:13:47:f5:cb:1e:ae:fc:ae:7c:16:da:
1e:dc:5b:c7:58:2c:44:03:60:a6:85:ca:63:e8:29:30:c1:f9:
9b:f4:64:cd:04:cd:30:f5:de:57:da:5d:6d:ae:e8:aa:11:23:
b2:e9:4b:7a:d9:d9:ef:e5:c5:49:cb:b3:34:47:23:21:f7:75:
ee:f6:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:07:41 2026 by rpki-client