
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
File: b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json)
Hash identifier: pjVSYUJ6avzYqf1OLf6HAqNIHWZV46bdQqUkOeCMv3M=
Subject key identifier: 2B:BD:38:30:35:96:28:68:58:16:3D:9E:D1:23:ED:68:A8:92:E9:22
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F4328584E54B4AD5EEB1BB7EFD0A0B900
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 16509
IP address blocks: 2607:d540:fc0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:ad:5e:eb:1b:b7:ef:d0:a0:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=a13f9e55-03c3-4645-9bb2-633f94e66feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:68:96:65:b3:ec:be:4f:d5:6f:a6:42:ef:
5c:71:16:64:01:fb:dc:12:6b:c2:76:cf:6a:a2:5a:
c9:45:6d:d3:6b:53:11:1b:92:b0:37:fa:1d:3e:b3:
eb:76:82:83:3f:f0:d9:07:8d:95:3b:d8:12:14:e6:
81:b5:4c:07:e7:83:a8:9e:ff:62:b4:9f:91:e1:5b:
98:10:7f:b8:59:9e:2d:f2:aa:f2:51:f2:b4:da:ba:
05:7f:64:b0:59:dc:92:a3:d4:fb:ae:4f:e1:a2:7f:
b6:91:cd:d9:30:35:81:56:c0:a0:7a:9e:f4:49:a2:
ce:2a:2d:ff:15:9d:3b:61:20:55:93:66:a7:b2:4d:
74:d8:46:48:a6:d0:da:d3:36:20:da:75:83:7e:3d:
ce:13:20:2d:c2:fb:8c:38:34:bc:e2:d9:14:6e:8e:
3a:ca:b7:29:de:12:78:17:92:58:f8:44:3a:f9:67:
3b:38:e0:6c:1b:a0:06:86:45:89:f0:e1:71:69:f5:
5e:e8:03:1a:ed:79:73:1c:15:30:ad:e2:2f:56:fd:
7d:a0:67:6e:24:ad:11:08:c4:52:c5:71:cf:0e:1d:
19:b2:ba:54:7c:2c:df:ff:e8:de:75:7d:a9:00:07:
f0:88:6a:64:3b:dd:21:5e:0a:7e:19:0c:53:fd:f4:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:38:30:35:96:28:68:58:16:3D:9E:D1:23:ED:68:A8:92:E9:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540:fc0::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:33:4e:0b:98:b9:10:2c:5f:52:16:4f:16:2b:a6:65:57:b3:
49:52:42:61:96:09:8a:ec:4f:0a:29:29:47:20:af:fa:5a:40:
93:c3:98:bc:7d:6e:79:48:f3:06:65:9e:77:55:d1:da:3f:88:
b4:8e:58:de:26:31:00:a9:d7:c5:b8:3d:35:d0:23:7b:fd:39:
e1:f5:4a:16:be:c6:b6:05:fe:08:5f:27:10:aa:50:b6:5c:87:
79:fe:36:ad:9f:dd:1a:46:1f:95:40:a3:28:2b:9c:b5:34:13:
e3:12:8d:08:6a:38:8e:0a:f1:d4:98:0e:06:35:c5:b7:fd:ed:
c9:16:f8:ef:4f:3b:7d:13:d3:7e:0a:eb:83:94:c7:67:43:77:
e1:34:72:3b:32:73:cd:9d:6c:7e:36:63:30:6c:ba:c6:c5:f9:
ea:cc:b9:c7:fc:5d:a6:a4:72:d8:fd:96:1e:6c:41:6a:33:dd:
b9:f5:91:7c:89:d8:1a:e3:1d:b0:a8:90:24:6d:71:ab:95:d0:
66:b0:24:93:b0:4f:71:97:6f:9e:e5:1c:c7:0c:86:d3:68:5b:
e1:60:16:d4:7b:f4:48:fa:65:04:e4:da:91:03:75:3e:88:35:
a6:7e:c8:d6:16:97:19:82:ad:97:3e:43:ea:19:f2:65:9b:58:
97:08:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:44 2026 by rpki-client