
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
File: d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa (raw, json)
Hash identifier: sfH0M2WlVtfasdKGfqLOSA1t+hiW1oUi/u/ubZUY4js=
Subject key identifier: 19:DA:CC:97:1D:87:74:25:AA:2B:1D:38:E7:2A:72:E0:C0:27:29:64
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584EFE1223737FC617EB6B4BA900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2001:418:1401:300::/56 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:23:73:7f:c6:17:eb:6b:4b:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=2f1baf26-22da-4368-a5d6-21ebed20c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:0e:2e:95:34:d1:ea:09:86:b2:80:9a:4b:
65:38:7d:dd:c6:19:2d:96:72:16:78:89:b6:cb:ae:
97:8a:f8:73:43:b4:db:e5:59:93:25:c2:b7:cd:f8:
66:b8:d5:c7:d0:41:a7:7c:76:c0:24:9d:cb:57:27:
99:20:de:cd:4c:0a:d5:88:9c:4c:f5:89:3c:88:91:
39:6e:ff:73:f0:65:3b:36:21:b4:8d:b0:08:55:60:
33:d2:53:03:eb:3e:a9:e3:e5:23:94:a4:98:b9:95:
f9:dd:aa:79:a3:af:da:4a:f4:c3:69:27:19:a2:4e:
28:f4:32:05:1f:0b:63:93:c1:d2:71:d6:da:71:41:
08:fe:ee:48:09:d7:0f:6b:76:0a:cb:04:0a:70:b9:
96:79:38:52:aa:9b:9e:43:da:bf:0b:05:ad:ff:9a:
f5:74:fd:11:e0:13:19:0e:5c:97:04:70:7f:79:10:
c6:ba:de:bd:05:f1:70:27:a6:1d:5b:21:8a:1c:a5:
d5:6b:4d:e7:5c:8a:4f:45:4e:9f:52:2b:2a:52:df:
fd:31:7d:d3:d8:76:e4:14:65:f4:d9:7b:bd:d3:6b:
7c:a3:e2:8d:ec:af:a6:7a:31:9d:48:bb:67:3c:51:
d2:64:3d:46:3c:4e:72:09:8c:17:b5:06:57:93:b8:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:CC:97:1D:87:74:25:AA:2B:1D:38:E7:2A:72:E0:C0:27:29:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1401:300::/56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:db:01:89:d1:c1:5f:37:90:43:49:59:bf:5b:4e:b7:b6:f5:
62:fa:d0:f8:d6:08:f1:1b:91:e6:02:6e:ca:f0:34:04:7e:a8:
50:0a:12:13:d9:e4:41:03:8e:9b:95:38:24:56:94:78:fb:cf:
dc:ca:55:3d:c9:e1:a6:6a:cd:f5:6b:bc:ce:fa:95:da:6f:6f:
9c:81:8e:06:70:b2:44:dc:af:a2:e4:a6:f6:15:12:64:39:41:
22:af:39:82:81:a6:93:8b:15:7f:4e:5f:42:ba:d1:67:94:e0:
54:dc:e3:e9:52:67:c3:51:4d:df:ea:b5:74:7a:ef:b7:c7:61:
13:8f:ee:7b:07:39:3b:80:73:88:8b:4d:e9:c0:aa:bc:be:6f:
92:3e:ce:dc:93:6c:60:fd:56:7b:6f:63:c5:1a:84:67:9b:6e:
f8:ae:7e:ca:95:39:00:27:7e:86:19:71:96:12:08:7a:79:d5:
e4:29:2d:80:8d:60:a0:cd:45:e9:75:11:91:89:a9:98:6f:89:
7c:80:14:af:3b:7b:56:a9:a0:db:93:07:c7:06:d5:9a:0b:3f:
a1:40:4a:b1:93:db:e2:f1:af:1a:09:53:13:15:89:b9:e7:9a:
a4:57:5a:a6:4d:1d:c9:73:99:26:4e:cc:31:24:2e:13:3e:47:
64:85:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:58:53 2026 by rpki-client