
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f2e8c36-be3b-3920-a968-042da43e7e10.roa
File: 7f2e8c36-be3b-3920-a968-042da43e7e10.roa (raw, json)
Hash identifier: vPvMkAvH2vH1JNb5SOyYuvLIBeocFplz6ZXO1dGitM8=
Subject key identifier: AE:7D:F3:2E:C7:41:23:4B:FE:E2:64:A1:AD:3C:97:7F:CC:C0:45:54
Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial: 010D0C9F4328584F51D2C0ED394BB09C1134C2C0
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f2e8c36-be3b-3920-a968-042da43e7e10.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 376
IP address blocks: 2001:510:c013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:c0:ed:39:4b:b0:9c:11:34:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=2f3f5205-21dd-44e8-84c1-2288ce0e3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:53:87:a9:ad:d6:ee:fa:bf:09:73:4c:d4:
6b:11:72:56:d7:1d:64:2c:e2:29:02:d6:0c:17:41:
88:0c:18:ae:86:95:3c:7a:21:e6:05:e7:e4:e1:d6:
ee:dc:39:e1:46:ba:29:72:0d:2d:b6:7a:ce:b8:12:
9b:3b:89:5e:74:de:af:49:97:1b:e3:90:76:fb:bd:
9c:05:a6:28:08:1f:c4:de:4e:54:1d:65:74:5c:ee:
a8:86:b4:1c:15:8a:92:73:9b:c4:e2:21:86:a7:05:
c5:99:56:ba:7a:02:10:81:df:3e:0f:44:c8:cd:cd:
24:6f:cd:6f:70:c9:e8:a9:7b:64:dc:cf:8a:ae:42:
9c:17:d4:bb:86:65:f3:d0:9f:72:14:d0:83:48:c5:
91:db:4f:1d:fb:f9:68:75:eb:8a:de:78:e3:71:6c:
06:27:be:94:0f:76:aa:b5:a2:99:a4:01:cc:f1:86:
19:cd:a3:7c:2f:02:71:05:b9:a3:97:d4:fd:88:2f:
b1:2f:7c:69:4b:17:bf:bb:93:c8:bd:37:7e:a6:4b:
81:c5:b0:3d:f4:78:ed:b7:82:56:89:87:39:77:99:
70:5d:bf:80:a0:94:d1:53:fb:89:e9:e7:55:de:a9:
08:ec:d1:ec:e2:1c:aa:85:84:d6:c8:d6:29:3f:0d:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:F3:2E:C7:41:23:4B:FE:E2:64:A1:AD:3C:97:7F:CC:C0:45:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f2e8c36-be3b-3920-a968-042da43e7e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
X509v3 Authority Key Identifier:
keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:510:c013::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:20:3c:46:bc:59:11:a9:d6:a1:c0:a1:36:a8:59:ef:6a:d9:
fc:ad:d4:74:69:46:9e:00:fc:33:1b:10:cd:a4:e3:cc:bd:c1:
86:7c:1f:1f:4e:aa:73:b9:ff:5a:a4:7e:42:48:8c:d3:c4:e6:
40:25:11:63:79:d7:1b:d1:a3:a0:1c:e4:3b:2a:f8:b1:d2:46:
2e:79:3e:0b:11:69:81:70:91:76:9a:0d:dd:63:4b:e2:10:62:
cf:68:1b:80:0f:58:cd:2f:b8:34:b5:c4:97:be:0c:9c:0c:04:
0a:ff:ba:2f:26:96:fc:6e:cc:c1:86:8a:ab:85:ed:27:cb:cb:
70:4f:57:44:1c:4e:b2:c0:d1:d9:82:b7:5c:e3:54:c0:44:d0:
1b:2c:95:1e:f9:8b:b5:c0:9a:88:66:6a:0e:7a:6d:7d:d2:d0:
83:9e:59:b3:4b:74:b6:a8:b5:79:5a:03:f6:bf:24:ce:10:42:
b5:05:a8:45:42:86:12:15:44:c3:5c:84:0b:5d:02:13:60:9d:
41:82:18:f1:b8:c1:66:fe:3c:4b:4e:a0:18:16:18:ac:79:e2:
29:5b:58:f0:10:03:68:ee:3b:b7:00:9d:67:97:cb:59:83:9f:
a2:43:7b:a9:bd:35:17:95:e8:04:b9:ea:04:17:f5:7b:8c:15:
fb:77:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:35:23 2026 by rpki-client