
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
File: 0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa (raw, json)
Hash identifier: NBnhfUO+vrm9YM5I2R/RlYUMwf7ZG5gTXCF09op9zJ0=
Subject key identifier: 5C:68:D9:A6:AD:C0:D8:79:75:B3:2D:D3:01:4B:9E:48:54:1D:26:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522912FB9F2E98A05656B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 2606:4700:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:29:12:fb:9f:2e:98:a0:56:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=d506a868-f558-4209-850e-fda7913b9686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:fa:9e:a8:94:40:72:06:10:e2:2b:40:9c:
b0:56:bd:bb:82:a4:87:43:21:32:cf:b8:eb:72:00:
5c:08:05:83:31:49:8a:3c:c8:ed:bb:c2:f2:1b:5b:
17:4e:87:c1:6f:d0:c2:46:ae:55:ee:f6:47:02:21:
23:26:74:56:29:46:eb:cb:4e:bb:32:04:7f:55:6f:
0f:a0:b3:fe:3b:43:aa:19:cd:11:81:db:6f:3b:7c:
f6:ba:8d:b0:f5:ad:8a:d4:b5:1a:ee:a0:e2:13:3b:
79:55:37:05:f5:51:b8:27:fe:71:f0:4f:42:ee:56:
5e:c9:68:6b:7f:8d:a6:12:eb:71:13:b7:be:e6:2f:
f9:0b:98:09:51:5e:b9:7c:bd:ff:34:2a:ee:e0:d7:
35:b7:91:f9:dc:22:8c:e7:3b:53:ae:93:d3:c8:ff:
12:d2:50:80:ee:97:98:17:62:83:b0:a7:17:6c:aa:
33:9d:ba:15:3a:72:d4:13:5e:6a:d5:1c:b1:f7:ff:
ae:87:e8:92:42:70:a7:cd:f8:02:49:9a:49:3b:a9:
25:d8:f5:7b:fd:75:23:08:c5:14:c2:77:a4:9b:92:
cd:c2:8c:a7:02:9f:c5:fc:b5:e4:fa:a2:78:56:2c:
8a:0f:c0:fb:97:89:4f:f9:e5:4b:f9:38:36:89:8f:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:D9:A6:AD:C0:D8:79:75:B3:2D:D3:01:4B:9E:48:54:1D:26:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:bd:ba:11:e0:61:22:49:6c:12:b9:53:e5:7a:49:ae:de:ad:
ff:67:07:3f:b0:3b:5b:eb:2d:03:08:ed:fa:8b:ff:13:26:79:
bb:dc:de:9f:d5:05:90:51:b0:cd:df:6e:25:fc:19:85:ce:d2:
18:26:43:5e:3f:e3:0c:eb:1d:c5:0e:2d:eb:4b:95:0f:15:e8:
e1:54:5b:fd:0f:66:b2:95:36:99:ca:e2:57:7c:46:8c:c1:f3:
a9:ec:8f:58:bb:ca:6d:4a:ea:06:49:27:08:11:e5:37:60:bd:
6f:ea:ce:b1:c4:d4:2a:ce:09:d5:b7:5f:e4:78:83:17:75:14:
c5:1e:1f:db:06:ba:db:c5:4a:7a:1e:1c:df:aa:36:c8:9f:7c:
62:e7:f8:52:87:45:9a:0e:57:d2:c1:25:e5:cc:7b:b9:bd:0c:
2a:4d:83:27:27:48:13:8a:1a:ed:ec:f2:0e:ac:4e:df:8a:b6:
9b:70:56:e8:fe:50:36:9e:0b:f4:32:8f:e6:8b:da:5b:c4:f7:
ed:09:e6:7e:46:0f:e6:90:08:f2:cb:db:ad:53:1b:00:60:c9:
af:ad:b8:1d:3e:be:b2:ae:78:01:a6:4b:8e:45:6b:81:6b:cc:
4f:ec:d4:22:fc:d3:52:ab:d8:c8:5b:08:f0:22:35:a8:21:23:
56:19:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:55:12 2026 by rpki-client