
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa
File: 0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa (raw, json)
Hash identifier: ZuJ4MJdv5M8ZCiBXUb1IDovG8o+058esIs/cYizKnXk=
Subject key identifier: 5A:2A:86:85:E4:AC:D2:E6:79:EC:27:28:F7:ED:69:9C:BD:61:06:60
Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial: 010D0C9F4328584F4F0812672625527A852B4B30
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 376
IP address blocks: 2001:510::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:12:67:26:25:52:7a:85:2b:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=9da5db48-d31b-41dd-b7d0-8b3fdb88923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:31:29:3a:30:98:77:2d:b3:92:2b:28:50:
69:9c:a7:87:cb:e0:30:d1:81:e3:17:18:f6:5f:58:
f2:2c:da:02:4e:22:f2:83:f8:37:eb:83:aa:96:26:
f6:8f:a6:d5:85:16:99:ce:4b:8b:6f:56:3b:9b:04:
c8:c5:37:17:82:07:93:c7:6f:08:0c:e5:53:01:c1:
a4:b0:35:c6:79:79:b8:1b:50:9d:1a:6d:d7:74:73:
c6:e6:2f:7f:2c:a7:06:ba:a9:42:f2:ee:0c:69:b5:
27:24:87:c4:36:83:b1:5e:8b:e3:65:81:46:a2:21:
76:62:1e:57:f5:af:d0:3c:ba:9a:af:85:9a:91:28:
09:e9:25:14:f5:72:8c:b4:08:45:72:3e:74:db:a6:
ba:1f:d8:f8:3a:41:32:65:11:28:2f:33:d0:c8:53:
88:7d:44:b0:06:e4:b0:e6:9d:33:6c:4b:91:ec:da:
61:fd:8a:85:40:f3:e7:fc:30:2e:9f:f3:1c:98:2e:
bb:db:82:b3:76:45:fd:26:6a:40:71:23:44:e6:c7:
13:89:74:7a:a6:17:30:4b:fa:3c:49:fb:75:98:82:
6f:39:21:6b:a1:c2:1f:3b:78:8d:1f:40:50:5f:ff:
77:df:dd:ab:38:c4:02:db:40:af:70:99:1b:37:fa:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:86:85:E4:AC:D2:E6:79:EC:27:28:F7:ED:69:9C:BD:61:06:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
X509v3 Authority Key Identifier:
keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:510::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b5:65:59:83:6c:07:6c:73:48:01:36:a0:f9:fb:84:06:8b:
30:51:dd:93:a1:02:14:fe:f7:bd:42:39:cd:49:4c:47:bd:27:
a9:1f:fb:c0:c2:e3:1f:95:c4:39:b9:42:f3:b9:8a:66:bb:4f:
01:b9:58:c3:de:30:59:50:dd:1d:58:c7:0f:aa:a3:82:b4:61:
c0:d8:f6:31:50:de:fa:76:e4:20:fe:45:61:0e:6e:a3:06:91:
36:92:bd:24:66:e2:22:e5:4d:a4:6e:91:c4:25:fd:99:01:5d:
6f:24:ce:c1:13:d1:d3:8c:82:85:aa:1d:6c:ed:a5:02:86:58:
2b:ba:fb:11:d2:f5:24:38:16:45:b3:35:ea:ab:93:5c:c2:bc:
5b:70:66:f4:85:25:b4:fa:09:80:f5:5b:9e:cb:a0:e8:50:85:
09:67:26:0b:ff:55:53:4b:39:5a:33:1e:8a:18:88:a0:56:41:
f6:ad:b4:75:78:9a:73:9d:a5:43:3a:3b:77:e1:f9:7a:84:8a:
10:01:27:73:40:40:88:7f:d7:c1:7f:ef:22:a6:6e:0b:9e:b4:
09:b6:de:7e:3e:4e:a8:cc:78:a9:0f:81:ea:7c:9f:2b:c5:08:
21:da:fc:93:28:bb:df:8d:cd:96:43:c9:2d:cf:50:43:24:f0:
a4:01:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:43:20 2026 by rpki-client