
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
File: c7e8382c-9b60-35b0-a35c-9dc928aca465.roa (raw, json)
Hash identifier: yXKlEa6HcpIWMV7yX+g/GrAAB7vVx7heonkx/XNOhJ0=
Subject key identifier: E4:9D:74:09:65:E6:A1:FB:67:16:7C:CE:20:41:80:26:5C:9D:47:1A
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F4328584F497605BBB25BB20A86CED560
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 49
IP address blocks: 2610:20:6fcf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:05:bb:b2:5b:b2:0a:86:ce:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b0c1d8da-2bab-4918-969f-d5e3dd484b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:a2:2e:f4:f1:d7:5f:14:f1:ef:7f:de:62:
6f:81:16:d9:68:ad:97:de:a3:77:e4:78:f9:73:97:
7f:5c:1f:01:c7:91:3b:71:dd:80:19:ee:e3:02:8b:
ac:27:57:68:12:6b:3f:1a:c6:0f:56:0d:49:78:32:
74:8e:97:d7:af:23:b8:61:6f:bc:c4:da:dd:c6:2c:
98:9d:08:88:e5:87:c4:8f:37:b0:c0:27:a4:17:76:
59:19:e0:11:75:d2:da:02:32:19:58:9e:13:66:7a:
09:6c:e3:03:fd:e3:31:d6:9f:18:c8:f9:68:fc:06:
d8:72:96:54:30:c6:09:d9:ba:23:4a:f8:23:2a:ef:
0f:55:9d:47:0e:94:55:5b:49:f9:61:ec:51:24:95:
6b:fc:f2:ea:5f:f1:0a:e2:4a:14:2c:08:a7:cb:f2:
36:48:85:5d:d9:3d:d1:73:11:f5:83:df:54:97:15:
36:1c:6c:fc:f5:13:77:02:ba:a6:d2:d4:f4:b4:49:
b4:a2:78:fc:cc:7d:1a:70:ff:ce:1f:c3:21:28:92:
a1:6a:92:47:5b:5e:ff:e0:7b:0b:43:eb:f3:33:97:
a7:8f:56:4d:49:87:cd:50:b7:23:44:2a:3b:e5:00:
24:c2:d9:38:50:e6:1e:97:94:9b:b8:5b:ff:69:53:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:74:09:65:E6:A1:FB:67:16:7C:CE:20:41:80:26:5C:9D:47:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6fcf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:f0:3c:b9:5f:17:b1:51:ee:64:b8:77:cc:ff:20:09:a9:38:
1a:94:b5:f8:32:b1:de:81:3b:85:b0:d2:ac:40:05:70:9a:9e:
54:a8:20:c9:93:87:e9:a0:ad:84:ab:8e:ac:af:ef:7e:c6:e9:
1a:15:3a:a4:5a:42:e6:8d:74:a9:09:31:79:54:b4:16:b2:93:
07:9d:9a:3a:4f:a7:c6:6c:8b:3c:ee:54:83:37:b8:5e:5d:8c:
7c:f2:42:b6:99:b1:41:1b:44:47:9e:8c:84:f8:19:a4:4b:19:
48:42:fc:ef:a2:d1:b8:6e:c9:94:cd:3b:7c:e2:77:a7:2a:68:
f1:11:32:61:34:23:4e:6e:17:83:06:27:d2:15:a9:3e:63:6b:
89:08:1e:66:d3:18:11:ca:1c:3e:05:7b:c2:cc:85:27:f3:02:
25:ae:c9:d4:00:50:c9:f4:3c:ed:4e:29:8e:4e:7e:fa:10:33:
28:c1:3a:30:d2:3d:63:15:5a:b4:9e:eb:d2:e3:31:ec:d4:5b:
6d:dc:af:fa:d9:18:f4:a3:fa:19:fd:b0:05:6b:db:04:e3:6b:
f5:64:2b:80:9b:ed:69:39:bd:41:67:98:49:4f:fb:d0:26:eb:
46:02:41:a6:8c:ee:ae:f7:37:59:67:6f:7d:72:a0:1b:31:97:
89:80:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:59:04 2026 by rpki-client