
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
File: 7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa (raw, json)
Hash identifier: 8ODsrUP+6S7WR6sW4a6ZaNxNr+E9f6zWT64ZKLnrXQg=
Subject key identifier: 04:07:6F:E9:28:E4:64:41:CB:23:4C:A3:BC:AC:40:AD:20:44:E9:71
Certificate issuer: /CN=bae7ed2b-d42a-42fa-947d-f719eddc984a
Certificate serial: 010D0C9F4328584F497651272A77CBAB2D2965A0
Authority key identifier: 88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397423
IP address blocks: 2602:2c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:51:27:2a:77:cb:ab:2d:29:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7ed2b-d42a-42fa-947d-f719eddc984a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=347eedc3-90a6-4b2a-81d9-37d65b88784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:73:51:a6:67:cd:0b:dc:20:86:3a:05:f4:
f8:72:45:88:e2:01:1d:d0:5b:87:f2:d7:eb:62:19:
56:0a:1a:6a:0b:68:70:e6:93:73:c9:08:67:a6:a4:
c9:dd:cb:51:4a:0b:7b:d4:a5:ef:1e:9b:3c:88:60:
67:bf:6d:fe:1d:03:9e:b8:84:79:88:06:5f:da:00:
b6:62:7b:59:04:8a:3c:83:bd:fc:ca:68:a4:be:96:
3f:9f:8e:48:3b:51:97:a9:22:74:a7:ef:89:24:86:
f8:d0:02:15:f4:14:fe:39:4a:49:c2:c1:af:8f:d0:
42:31:99:33:36:fd:35:d4:3d:55:8d:00:4b:21:13:
e0:dc:04:69:ab:16:7c:4f:36:f2:c9:b7:2b:93:27:
9a:3b:bb:ee:c3:77:0c:33:a2:b2:67:1e:13:a1:c1:
d5:fa:9b:10:98:f7:13:98:05:63:43:25:a4:a6:b7:
a4:01:dd:1a:9e:0c:9c:00:2f:0a:ee:23:e3:63:aa:
ba:78:99:98:18:75:f1:c7:bb:94:62:bc:3a:25:c2:
f4:65:da:4a:4c:02:12:83:3d:78:0f:28:82:f1:46:
1a:7b:69:83:d6:b5:2f:84:9c:97:12:d6:e8:ea:96:
9b:de:47:33:b3:dc:bf:ea:f7:56:d4:10:c0:c4:fe:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:6F:E9:28:E4:64:41:CB:23:4C:A3:BC:AC:40:AD:20:44:E9:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl
X509v3 Authority Key Identifier:
keyid:88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d6:e8:8b:35:21:fe:72:72:ea:17:bc:09:86:f3:99:bd:e4:
eb:a2:95:88:13:c3:f8:10:f1:b9:06:36:cf:e1:34:5a:58:58:
b3:30:88:d7:dd:ad:78:ee:bf:10:84:b8:c8:d7:a0:4c:26:4d:
e2:ba:c3:0a:2d:3b:b9:e3:0d:b4:78:73:e5:25:00:f9:a7:f3:
91:4e:19:3b:52:ba:1d:b7:8b:69:5e:d0:a9:ee:c4:f8:f9:a3:
05:e4:0a:ee:d6:a5:47:20:fc:fe:74:08:f8:3f:36:23:95:3a:
eb:10:97:ca:1b:58:16:95:f1:fb:e0:c9:47:eb:b5:57:75:9b:
e3:b2:63:ba:11:69:ca:da:e4:64:ef:d0:b5:95:d3:97:8c:d6:
b1:79:e3:4c:2b:a5:45:d0:6c:4c:65:90:6e:ec:e7:14:95:d6:
68:b0:e5:74:79:e7:9c:db:72:b5:2d:76:21:3c:5d:02:6f:6b:
8c:a4:ce:ad:ca:80:af:83:64:a1:11:cd:ce:d2:19:63:e6:32:
2f:db:ba:0f:18:a6:62:2a:2e:4a:57:6d:9f:a6:30:89:9b:65:
55:36:6c:c7:55:0d:e7:30:23:fe:41:d7:e3:8e:46:44:d3:f3:
18:ca:ed:b6:84:22:66:97:d1:87:aa:10:21:ea:34:1c:67:e6:
a4:2d:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:35:13 2026 by rpki-client