
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa
File: 2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa (raw, json)
Hash identifier: nMdzxcpZYoduLM5WeZ8jiYp0z9bnsJ42suWFisvkhYk=
Subject key identifier: 28:78:93:F4:13:1E:43:F9:A4:E5:AA:A2:03:40:31:B8:20:BC:47:B0
Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial: 010D0C9F4328584E5FDF72ED8D16D79E9230F180
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa
Signing time: Fri 03 Jul 2026 09:00:12 +0000
ROA not before: Fri 03 Jul 2026 09:00:12 +0000
ROA not after: Thu 01 Oct 2026 09:00:12 +0000
asID: 19905
IP address blocks: 2620:ce:e000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:df:72:ed:8d:16:d7:9e:92:30:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Validity
Not Before: Jul 3 09:00:12 2026 GMT
Not After : Oct 1 09:00:12 2026 GMT
Subject: CN=f8f84aa5-cd0a-4591-9247-bba7a61bbee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:16:49:cf:22:d3:c5:8b:ef:a7:f5:dc:3c:
18:e9:39:ca:88:d5:65:2c:5e:37:ba:2c:14:03:7f:
e0:f1:2b:b4:ef:ba:df:90:c3:7a:4c:01:c6:c0:9d:
64:64:6f:c9:90:d8:7a:8a:01:7d:61:9c:c3:f8:98:
9c:fd:29:f5:23:4c:13:83:db:a2:75:67:8b:12:c7:
a8:09:06:be:da:24:c9:0a:18:70:cd:98:c0:36:e7:
1a:b2:d3:0d:71:0e:e8:d9:d0:cc:62:96:0b:61:ad:
ce:73:72:ee:27:92:3d:92:c0:ac:00:aa:2d:5e:2d:
a5:21:52:e2:4a:86:9c:35:7e:d2:cd:78:b7:fd:1b:
fd:1b:7e:92:47:e0:cf:4d:01:87:c8:26:a0:8d:57:
6c:2e:d6:48:0f:8a:eb:6a:2c:ef:63:e7:fe:93:5a:
f9:70:14:d2:31:86:6f:ee:10:54:7e:03:e0:2f:2a:
b3:84:a1:d8:79:39:d8:f0:2e:8c:32:18:96:e5:d9:
8e:54:c7:9c:45:3a:f5:93:d8:b7:3d:5d:6f:10:09:
ce:a2:ae:f8:60:aa:ed:83:d8:76:e0:f7:e2:20:d0:
32:7b:8b:2b:a3:45:b6:16:c5:d6:d9:5c:6b:59:54:
bf:74:fc:76:25:98:49:6a:7e:d7:ca:b5:32:30:79:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:93:F4:13:1E:43:F9:A4:E5:AA:A2:03:40:31:B8:20:BC:47:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
X509v3 Authority Key Identifier:
keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ce:e000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:9f:85:2f:00:41:62:56:2f:71:f4:c7:ea:c5:a2:3e:e9:de:
41:22:a0:6f:da:4b:50:5a:17:4c:08:7e:7b:90:cf:c1:56:93:
ff:df:e8:2d:e8:23:d7:44:69:39:94:2e:13:13:4f:92:fa:f9:
0c:d1:f4:26:73:91:94:5d:a3:a7:c7:a6:c2:6b:17:e0:28:d7:
14:9b:d0:8b:1b:a2:45:54:1b:c4:7b:7d:ca:25:05:fd:34:0b:
c8:76:97:e0:a9:af:13:0c:e4:1d:e6:f2:3f:20:15:76:e0:a1:
cb:8b:ea:17:3e:d0:ef:98:3a:d9:03:5c:92:74:8c:03:c2:03:
2f:24:77:95:44:57:89:82:9e:77:41:97:67:2d:86:fc:e8:0a:
73:a6:90:61:2d:8e:c3:c8:0d:83:f5:df:c7:00:34:5b:c9:59:
83:7c:4d:a0:16:4b:fe:b3:fb:80:cc:5c:c4:c4:84:de:ec:bf:
e2:ff:dc:d5:8c:56:ee:78:e6:02:32:f6:58:8f:9e:bc:94:be:
b5:76:1a:1c:d8:f4:19:2e:ba:98:6c:24:4c:df:ca:e5:b5:8c:
60:7e:8d:84:fd:1f:60:3c:a3:ff:6c:de:d0:06:d1:c2:1b:7f:
6b:f4:a4:30:38:9c:ac:51:17:c2:86:d9:c3:3a:99:c4:5b:23:
62:25:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:53 2026 by rpki-client