
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/beed065a-43ca-3d79-a1b8-2f060655af4c.roa
File: beed065a-43ca-3d79-a1b8-2f060655af4c.roa (raw, json)
Hash identifier: XS36fR0571P4NRdV9HkdGHPHjkBsdFhetesa27cU76k=
Subject key identifier: A2:0C:30:56:FE:D1:EA:C0:06:0D:6B:1C:BC:4B:55:CE:01:C1:1C:46
Certificate issuer: /CN=9ac09e11-24a9-4451-9633-b772a7a11960
Certificate serial: 010D0C9F4328584F4F07FD61BCA6FFFAB6BB49C0
Authority key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/beed065a-43ca-3d79-a1b8-2f060655af4c.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 194
IP address blocks: 2620:117:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:07:fd:61:bc:a6:ff:fa:b6:bb:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac09e11-24a9-4451-9633-b772a7a11960
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=897292fe-521c-45c1-875c-2d4b8f28af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:7e:c1:7b:3c:3b:23:24:99:f7:ca:49:b6:
4d:8c:92:80:11:64:ed:ec:9d:c6:e9:b5:9f:cb:9b:
65:51:75:fc:74:e6:b5:d8:3d:9d:91:ee:82:aa:74:
75:07:bd:99:89:8a:92:d4:f1:7f:a7:a8:68:20:5b:
46:aa:9f:21:b5:d9:90:65:b7:48:ef:5e:80:1c:50:
f2:57:c4:96:2b:af:f2:f7:94:87:a2:12:b0:4f:f6:
d6:97:ba:dd:26:68:ce:65:46:92:2b:81:36:ea:96:
8a:45:63:fa:9e:35:b0:90:bd:91:09:56:bd:05:bd:
5c:69:b7:f8:00:bd:52:8f:69:7d:fc:50:31:2b:00:
7b:fb:06:45:68:15:4a:9e:52:b0:ae:c3:18:fc:24:
75:71:2e:dc:cd:8b:23:26:45:a9:ed:ea:dd:04:03:
d8:3b:35:39:b2:2f:91:1b:94:42:dc:77:8f:ba:22:
06:ba:7a:ba:81:71:c2:76:5a:20:11:c9:2b:26:d2:
0c:c8:81:de:19:a4:c8:8d:ea:41:c2:d7:60:73:04:
ad:7a:cd:c6:59:65:7a:db:7d:e6:24:cb:b7:46:b4:
69:92:6d:c0:e6:d9:ef:6c:7c:1c:18:7b:4d:94:e9:
69:b7:0f:61:90:1e:33:be:f6:c0:2a:77:6a:be:5b:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0C:30:56:FE:D1:EA:C0:06:0D:6B:1C:BC:4B:55:CE:01:C1:1C:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/beed065a-43ca-3d79-a1b8-2f060655af4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl
X509v3 Authority Key Identifier:
keyid:37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:117:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8b:e8:44:6e:3b:f8:ca:6d:9a:b6:3e:55:18:b2:2f:00:df:
86:45:d9:94:1a:1e:5b:94:80:b3:7e:e9:af:a8:d4:6b:71:c5:
53:57:f1:c9:8a:a9:6c:60:56:aa:b4:d0:c2:1e:25:ef:e8:20:
a4:4e:56:f0:eb:6c:d3:7a:f3:0b:21:8b:92:a0:53:27:79:83:
3c:f3:bb:11:ca:82:c3:34:d8:11:fe:d2:99:0f:84:32:a7:3f:
49:c2:12:26:9f:54:54:c8:f5:fa:d7:fb:01:4e:09:5e:ab:8d:
01:a0:86:dd:1c:f6:14:de:56:31:d9:08:3c:0b:dd:df:82:dd:
67:0b:ea:2b:c8:10:28:f6:f8:42:90:9a:ac:90:02:e8:eb:47:
91:7e:45:c5:35:f3:b8:28:73:e6:e2:8f:4d:06:72:a9:b4:78:
34:69:03:70:8b:c1:ee:a9:cb:50:7f:00:a6:35:55:5f:18:25:
81:2f:85:57:01:50:c9:94:a1:98:ca:a5:2a:be:ba:d3:72:f3:
44:1b:44:35:43:eb:fb:26:6b:0a:ca:67:18:7e:1c:2d:9b:ca:
0c:41:2c:c6:b9:2b:99:79:ce:36:0f:9a:39:89:15:9c:06:02:
a3:a7:a7:9b:f3:91:40:1e:79:e0:d3:d7:32:ae:cc:f7:df:69:
c7:f8:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:11:27 2026 by rpki-client