
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa
File: 0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json)
Hash identifier: IooeQPfXs6/VaOOw0XN7lN6IS4lzgMqFpXoYLLv+QNY=
Subject key identifier: 2B:B3:CC:49:DF:10:5D:68:8E:55:1B:70:AC:85:11:B0:E4:31:2F:53
Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
Certificate serial: 010D0C9F4328584E3A2F22D94D4A1B49B73A2C80
Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 14585
IP address blocks: 2604:65c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:22:d9:4d:4a:1b:49:b7:3a:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=95535f1e-56ac-4de9-8a9d-413e090c75c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:8c:a5:2c:c0:48:42:9f:ac:82:fe:f2:6c:
9b:2c:1b:6a:ac:0a:bb:78:b9:80:11:01:6f:36:f3:
e5:b6:8a:f9:97:22:91:22:f2:de:16:81:54:84:b5:
99:ad:30:26:d7:e5:36:a3:d5:cf:2d:4c:5d:74:78:
53:6e:51:1b:83:2e:e3:0c:28:ac:81:37:0e:d7:de:
de:ef:dd:d2:75:e6:97:8f:4e:c0:0f:06:12:9c:44:
fc:63:89:11:62:3a:fc:ea:2f:1f:7f:d0:5c:97:97:
5c:b1:72:c4:ff:ec:0c:8e:4f:a7:9b:d9:f8:cf:d6:
b9:65:e9:02:5f:95:3d:28:8f:8c:e4:5d:78:fa:c4:
05:9b:0d:7c:ad:d7:3a:a1:62:7c:f9:7c:b5:6c:e2:
0b:a1:21:88:2f:23:5f:c0:0d:7f:89:f7:be:98:94:
24:b6:36:d1:19:12:84:10:03:46:5c:00:77:33:70:
32:af:a5:5b:55:80:bb:15:eb:5f:67:3c:77:a8:11:
28:7e:af:b7:16:2d:58:2d:6c:41:63:21:ef:1d:e9:
7c:67:14:7b:db:bf:b8:f3:af:d8:10:ac:84:5a:60:
3e:da:0d:ed:86:d1:1f:7a:17:86:dd:cf:af:13:83:
ef:b5:77:4e:7c:08:68:93:fa:2c:be:44:c2:28:1e:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:CC:49:DF:10:5D:68:8E:55:1B:70:AC:85:11:B0:E4:31:2F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl
X509v3 Authority Key Identifier:
keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:65c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6b:0b:99:5b:a9:53:31:4e:d9:c8:51:87:7e:2b:1a:4e:cd:
db:cd:fc:fb:14:42:68:20:83:d0:8c:68:2b:7b:56:eb:98:25:
3c:80:94:73:1e:7a:0f:a0:e8:8b:dd:be:9a:58:e3:6c:5d:18:
f1:74:3f:68:38:aa:ab:14:aa:3c:1b:5f:84:fd:a2:dd:ec:0c:
eb:88:bf:9d:e2:46:4e:a3:21:43:29:20:2f:a2:8c:44:ba:c1:
de:f3:28:1d:1e:39:c4:18:01:27:e6:e4:7b:e3:12:65:ff:bf:
65:70:d9:0a:de:35:6d:09:09:c2:53:cb:52:91:2c:0b:7d:f2:
af:db:6f:72:5c:bf:b7:b0:79:52:d0:c2:f1:dd:4c:24:ce:ec:
ae:79:eb:e3:6e:ce:06:c4:c2:21:bc:ac:2a:78:f6:d0:d9:6c:
c8:f7:07:c4:39:d8:d3:a0:38:c0:1f:49:49:93:e2:8e:7b:42:
87:4c:a9:c0:cc:9f:64:0c:57:3b:d6:19:cb:0d:6b:08:d6:28:
80:23:63:ad:9b:0b:bf:23:a6:e8:27:b7:a3:86:82:35:57:f3:
cd:ad:fb:b7:bb:c5:66:ea:47:dc:c1:3e:a3:46:68:93:96:42:
f8:f5:f1:fa:a1:f7:01:5c:23:43:13:4b:49:6d:36:9f:32:f4:
dd:06:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:07 2026 by rpki-client