
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/e0317d36-c576-30fd-87e9-4d6f0faba8c8.roa
File: e0317d36-c576-30fd-87e9-4d6f0faba8c8.roa (raw, json)
Hash identifier: jmXlwQvMBvDvZgcBXwvP+KpO3C8Se3/37upglQKFNHE=
Subject key identifier: B0:0F:D6:29:9F:EB:C2:15:84:2B:13:7F:99:0A:F5:02:A0:A2:61:B9
Certificate issuer: /CN=f6a6838a-15aa-48f4-960c-d9d0071829af
Certificate serial: 010D0C9F4328584EA7974896E4CA85C7718F0300
Authority key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/e0317d36-c576-30fd-87e9-4d6f0faba8c8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 2602:f95d::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:48:96:e4:ca:85:c7:71:8f:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a6838a-15aa-48f4-960c-d9d0071829af
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=03dd1a9b-7025-4805-9be0-de8899e11309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:f3:39:53:3f:75:32:ed:78:23:b4:53:53:
07:06:2b:7f:ca:58:44:ca:89:f5:7c:e6:75:20:d9:
47:f1:53:ec:c9:83:cb:3a:44:e1:ec:b7:35:d9:2d:
fb:3f:6b:ff:48:14:d0:73:a6:f4:62:ad:52:6f:8e:
51:bc:99:20:b0:2f:ce:55:3e:f3:6e:9d:5f:ce:09:
ab:1e:05:f3:7a:79:47:fa:f9:01:8a:6e:44:1e:6e:
6b:4f:72:f2:9e:c6:39:42:35:d9:29:dd:5c:16:7f:
b9:ed:5d:87:13:1b:86:96:0f:88:b0:d8:31:9b:a1:
a8:49:01:05:5f:47:de:5e:dd:61:46:61:d6:e9:f6:
82:f7:71:7c:dd:64:b0:b4:58:64:56:25:0e:36:9d:
e2:f6:a9:e6:d8:1a:dd:05:f1:0e:ee:ad:49:c6:53:
52:26:35:8c:8e:2a:32:46:fd:2b:e5:a4:03:1c:49:
38:70:51:fe:b8:3e:45:5a:47:15:05:1b:b0:98:55:
97:0e:80:23:6a:6f:30:fe:0d:4f:da:8a:e1:27:f3:
aa:7a:e6:42:a8:5c:6e:ce:1c:ee:91:17:2d:5f:ec:
f8:19:43:5a:a9:1d:5a:80:19:0c:3b:22:5d:2d:16:
9b:15:71:a8:b7:fd:73:6d:ec:ee:db:13:b8:1b:6f:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:D6:29:9F:EB:C2:15:84:2B:13:7F:99:0A:F5:02:A0:A2:61:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/e0317d36-c576-30fd-87e9-4d6f0faba8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl
X509v3 Authority Key Identifier:
keyid:21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f95d::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f5:6d:a8:d7:a2:a2:7b:65:7e:55:f8:6a:82:56:e9:96:98:
75:de:1a:e7:6a:be:ca:2d:e2:6d:ac:de:a0:53:22:6a:9f:9a:
cb:c2:35:18:3c:18:0c:6d:1b:74:70:09:cf:f9:9e:1d:17:1f:
ca:16:14:2b:80:f6:de:83:b6:96:7a:55:cc:1d:9e:d7:82:7f:
79:78:af:62:6d:81:51:73:a2:de:bf:3e:7c:a7:89:8c:b8:27:
76:29:83:98:a7:3c:1f:54:7e:a3:8d:a5:66:9a:f7:97:70:39:
53:ca:7a:5f:2b:c6:5a:83:57:a6:12:e5:71:d2:f1:96:79:12:
b9:b3:5f:0a:4f:14:88:98:97:f9:0a:6a:6f:79:42:5b:ab:14:
e1:8e:d0:7b:1d:da:58:61:64:e0:72:36:35:f5:9f:7f:e6:c9:
17:33:b9:e4:f3:e8:36:f7:5b:4e:ae:a3:6d:bb:c8:b4:4e:94:
7b:03:bd:2b:33:17:94:3f:e2:c5:84:8f:99:a8:32:f5:bc:c6:
96:4b:47:7f:2c:51:86:02:46:ff:f7:63:c1:02:04:5e:22:f6:
9c:54:b9:c0:02:ef:92:0d:b0:05:b0:cc:dd:d2:9a:f3:4b:4d:
6d:18:ea:b8:6c:f4:ea:68:67:4c:5c:4d:5e:2e:3a:46:ce:b7:
4d:b5:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:59 2026 by rpki-client