
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/009e3d66-5841-392a-bf04-3aedc934f1bc.roa
File: 009e3d66-5841-392a-bf04-3aedc934f1bc.roa (raw, json)
Hash identifier: 64Yn47e3EBfIAcq4hc9uS9MUkguL80oFDMXBy/ulYok=
Subject key identifier: 1A:0C:83:2B:CC:94:F9:CB:B4:53:0E:1F:8F:25:8D:A8:F1:15:D9:A7
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EAD1C55DC959F9EB4A6D0D780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/009e3d66-5841-392a-bf04-3aedc934f1bc.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 2000
IP address blocks: 2001:418:1410::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:55:dc:95:9f:9e:b4:a6:d0:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=068f4cb8-b4f5-4640-81dd-a47dc0828254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:fa:13:e4:63:eb:b8:86:15:8e:0a:f0:cb:
3d:f2:a6:95:5e:d9:f3:60:f0:47:e8:7f:c7:ac:db:
6f:80:55:18:75:c5:a3:fa:c4:1b:01:ec:41:fb:79:
3c:27:24:a9:f1:72:1d:b1:e0:27:e2:be:41:d9:06:
90:c2:26:79:34:fc:49:46:db:e4:a4:60:71:cb:99:
2e:1f:70:0f:4e:17:e2:82:92:a6:e0:61:2f:fb:ab:
d5:63:10:6a:b4:49:25:6b:da:ca:64:c9:a2:7f:7b:
4f:ea:e1:77:84:3b:69:0d:cc:a5:11:f9:67:83:5a:
2b:76:d0:58:9a:25:bc:c6:b4:cf:c3:0f:b8:c5:e1:
9a:e1:34:06:7a:cf:d2:02:2c:c7:4a:18:c3:ae:94:
ee:f2:9d:8d:01:a9:d0:38:b8:4e:6d:2c:09:3e:f1:
a8:de:18:79:4e:8e:df:b0:2b:b6:45:95:5c:96:40:
5f:5a:8a:bb:8f:af:26:fb:aa:65:f0:34:37:3a:56:
27:dc:cd:0b:2e:05:85:80:7d:af:8a:bf:09:5a:a3:
f6:10:c9:03:ac:29:a5:cf:a1:c5:14:53:cb:26:dd:
a3:fb:10:9a:a3:44:db:12:25:76:e8:ea:62:40:41:
1b:e4:86:92:42:38:02:11:57:aa:8a:29:54:f9:20:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:83:2B:CC:94:F9:CB:B4:53:0E:1F:8F:25:8D:A8:F1:15:D9:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/009e3d66-5841-392a-bf04-3aedc934f1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1410::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:8e:36:39:ab:e5:50:81:b0:91:fa:4b:b5:21:34:34:38:ee:
11:79:0d:f7:39:a5:c7:31:53:37:5b:82:0c:25:69:ae:30:3c:
fc:66:68:a9:6d:72:71:d5:b7:64:a5:c2:8e:7d:f7:dc:7e:ef:
50:f6:b8:75:dd:77:e9:f8:91:ea:df:3c:30:0b:9e:ba:bd:7a:
91:49:ba:4e:2f:09:ec:8e:1f:8e:c1:10:ba:0a:a6:99:be:da:
4b:9b:18:39:1a:07:ca:14:0e:25:7a:fa:2b:50:3c:23:50:21:
8c:01:f7:7a:21:eb:b6:64:07:26:9d:e3:22:37:61:7c:1d:dd:
b8:b4:dc:69:ab:e6:5e:37:05:3f:e7:ed:b9:2d:a8:37:55:49:
69:af:74:99:5b:d1:a8:59:f6:19:74:9a:08:09:f2:09:e1:5a:
06:5c:d4:31:e9:9b:73:c8:47:a0:01:f5:46:6d:4d:06:32:98:
dc:af:5a:65:47:3e:a9:25:10:06:e6:9a:f6:7b:04:7c:3d:3e:
ad:f3:32:d0:3b:af:46:49:9b:53:9a:c5:2b:49:5a:cf:e6:94:
78:a4:a6:b9:bf:96:7b:58:40:e6:68:92:51:8a:5d:d6:ef:04:
99:e8:d9:29:e2:f6:6a:5f:8d:11:fa:47:20:f0:00:2a:6e:29:
6c:80:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:25:35 2026 by rpki-client