
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
File: fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json)
Hash identifier: 0mZr3+3GTcwAezWtZIQEoKa7af03pXvpBMSoihviWI0=
Subject key identifier: 25:BA:3C:8B:47:3F:01:81:09:31:D2:94:AB:35:0A:8E:2F:0F:BF:CB
Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial: 010D0C9F4328584EE7BCB888D0ADECD33A3D01E0
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 0
IP address blocks: 2001:505:140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:b8:88:d0:ad:ec:d3:3a:3d:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=6617e515-5bb8-4b79-8b7b-892da15b3477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:84:52:27:ff:38:de:77:4e:7b:07:f2:a6:
20:12:85:e2:84:16:a8:00:29:47:eb:f6:ef:51:71:
36:4c:85:d8:49:0b:81:51:b3:bd:fc:88:9c:a6:fe:
24:fd:3b:51:2d:f8:76:4c:36:65:b5:d0:44:35:0f:
2d:e6:79:3b:20:34:2f:86:31:2d:51:d4:33:0f:0a:
50:7c:67:7f:7f:06:75:a5:8b:0b:db:bf:e8:16:54:
79:17:f4:13:92:55:20:e7:0e:bd:c2:f3:93:d5:58:
fa:96:ef:43:fe:aa:1f:85:4a:23:93:aa:ff:ce:8e:
9d:16:37:9a:a2:b1:55:32:aa:2d:73:c1:8c:16:72:
35:10:31:2c:71:8f:b4:d6:5d:4e:bf:23:99:1d:62:
0f:8e:c6:6d:25:79:89:62:a0:fe:a3:7f:91:83:a2:
78:08:6d:ee:07:6d:36:97:53:06:b8:52:fb:82:8e:
57:24:cc:c9:ba:31:00:91:3a:8b:9e:e2:26:82:b2:
ae:af:cc:17:e4:c8:9b:4d:24:34:d8:d9:94:e2:3b:
43:ed:9a:01:ae:e1:af:9f:7e:ff:8a:97:0b:23:03:
fe:67:4e:85:e1:01:9e:6b:e4:10:00:e1:8d:aa:fd:
57:80:37:2a:7d:a4:e6:60:5a:55:65:fe:27:69:d4:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:3C:8B:47:3F:01:81:09:31:D2:94:AB:35:0A:8E:2F:0F:BF:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
X509v3 Authority Key Identifier:
keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:505:140::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:94:b7:30:b8:b6:04:1c:ee:01:e8:13:19:b3:77:02:25:68:
4a:63:a8:8f:58:16:38:48:42:ff:33:33:76:3e:19:11:ac:da:
32:7d:44:cf:c1:d7:72:00:5d:49:ae:4e:cc:44:37:2e:82:df:
a1:83:94:7a:6b:83:54:45:b8:73:1b:23:35:14:57:e1:19:19:
01:95:7c:9c:41:dd:ca:f4:3c:c9:c7:97:5e:ae:1b:a1:5d:2e:
7b:df:2f:00:99:90:8d:be:65:2d:43:60:52:1f:40:ce:62:b4:
42:41:8b:bf:14:ab:d4:95:fa:b0:a0:e2:b4:48:e6:7c:53:4b:
4e:e1:89:2a:ba:33:b1:4b:b0:c0:e3:5f:1e:ab:99:99:ef:49:
be:9f:30:10:31:bb:b7:10:4a:65:73:6e:e0:4a:91:b5:cb:b5:
6f:c3:6b:67:da:bb:da:86:62:ae:91:eb:c2:d9:8c:46:db:22:
3f:b2:ce:a3:1f:37:bb:04:36:54:a0:a5:05:d5:cd:a9:f7:bc:
d4:d0:04:00:98:37:aa:1d:7b:db:a1:16:07:8e:c1:0c:a4:f5:
3b:25:16:64:29:65:4f:48:78:ac:60:46:58:70:eb:6c:78:19:
51:f8:2e:65:f5:0a:12:62:6e:2b:c5:91:a2:9a:6f:e0:a0:13:
96:8b:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:01 2026 by rpki-client