
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa
File: bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa (raw, json)
Hash identifier: E4j5zJywxn2SJiQAEas/WeDmyF8Eznm24F9PjZ8ybCM=
Subject key identifier: 3D:4F:21:3F:60:BF:AF:A7:28:B5:F8:E3:82:6F:E8:34:EF:99:AD:9D
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F4328584EA788B93A2E66D1020CEE8B80
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 2620:a0:200d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:b9:3a:2e:66:d1:02:0c:ee:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=30ce35ce-5279-4818-8990-6fd2abe13f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:5a:db:73:de:8d:56:a9:c0:bc:f0:ea:7b:
be:13:f7:15:7d:8a:c0:b6:4b:db:c4:06:33:84:55:
9a:d5:25:42:73:b0:2a:e6:4b:d5:ae:f0:63:73:d8:
91:3d:f7:69:e0:0d:78:ad:4a:ae:d2:76:b3:53:30:
06:ee:83:ed:f3:e1:f6:58:3a:86:20:2f:0a:92:42:
e5:2f:c1:10:c7:8b:d4:ec:c3:30:5b:d0:e0:73:7f:
78:cd:16:f7:53:9a:48:a5:a3:8a:c2:b9:67:38:07:
db:79:39:f7:50:b0:1e:25:c5:60:87:b6:2b:33:ad:
e9:2f:db:84:77:85:1e:42:f9:1a:5f:ad:3c:0d:d0:
95:54:db:65:ab:7c:f6:df:18:04:1d:42:fd:6a:9a:
a0:57:af:a4:0f:d7:81:7f:f0:ec:8d:64:f0:83:c8:
c3:5a:cc:9b:dd:5b:87:08:72:7b:93:72:26:71:d5:
ea:b9:c4:d8:7f:a4:e5:36:e6:2b:da:90:44:e6:e9:
90:02:41:0b:e7:7a:c5:56:d6:a7:89:ef:5d:e4:29:
6e:d5:68:8d:1e:c3:9c:4f:1b:e1:55:d3:df:52:75:
89:51:67:1f:fc:70:cf:ae:fe:ec:be:19:41:37:61:
93:62:51:f4:a5:74:18:89:04:87:f8:f4:21:1c:78:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4F:21:3F:60:BF:AF:A7:28:B5:F8:E3:82:6F:E8:34:EF:99:AD:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a0:200d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ab:08:c1:5c:3b:26:26:ed:c2:82:a8:18:6a:39:fc:56:81:
a7:63:e6:f2:8d:1a:eb:79:94:8d:15:cd:15:41:f7:18:20:98:
22:d6:cc:2a:4f:b0:91:34:11:87:9d:1f:e1:dd:7d:88:84:1e:
58:b3:5b:78:46:29:0b:8c:f2:90:88:4f:9d:88:4a:2a:17:c0:
4a:3a:4e:53:f9:df:0b:0a:0e:2b:e1:bb:3a:69:80:38:fe:fb:
20:16:95:53:bd:00:27:85:a1:29:44:43:f6:4c:a8:66:d1:d4:
2f:ba:ea:cb:07:de:9e:b8:48:30:fa:e7:1b:84:43:d4:4f:86:
2b:41:07:16:98:37:56:04:bd:4b:0b:b9:81:5e:71:fb:17:4a:
8c:b7:30:79:62:09:81:92:ca:d8:ab:2f:cf:20:36:a6:30:74:
6f:ed:1e:52:28:0b:4d:c6:ad:0d:ae:eb:aa:26:fe:6c:a3:2a:
d5:a0:f3:e4:0f:ce:a0:78:ed:0c:7f:20:49:42:74:ce:a8:c4:
09:e1:d8:37:7f:a2:80:b7:60:46:88:8f:4d:2b:3a:8e:b6:9c:
5c:e8:85:29:83:27:68:41:bf:3f:ec:65:31:7d:4b:8b:c7:3a:
d0:4d:08:75:76:5a:68:62:95:9e:90:f5:0a:f6:3b:48:73:84:
6c:8c:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:56 2026 by rpki-client