
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa
File: a4801da2-7172-31c2-8c21-34b2fb62f048.roa (raw, json)
Hash identifier: cuTlXWQGsCl3D+m+XSfdF1AkK3og91sI3gQqCCLUrME=
Subject key identifier: 1F:F8:C6:83:82:65:E9:53:6A:98:EC:8C:2E:6F:1F:BF:56:DB:2F:5F
Certificate issuer: /CN=40b08720-f667-4e69-b15d-2bd25101fae8
Certificate serial: 010D0C9F4328584E69A4B74CA71516F823877F00
Authority key identifier: A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa
Signing time: Mon 06 Jul 2026 21:00:13 +0000
ROA not before: Mon 06 Jul 2026 21:00:13 +0000
ROA not after: Sun 04 Oct 2026 21:00:13 +0000
asID: 400337
IP address blocks: 2607:9740::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:69:a4:b7:4c:a7:15:16:f8:23:87:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b08720-f667-4e69-b15d-2bd25101fae8
Validity
Not Before: Jul 6 21:00:13 2026 GMT
Not After : Oct 4 21:00:13 2026 GMT
Subject: CN=d1d8258d-624a-4699-85b9-9d853363d3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:85:96:86:e9:49:ca:76:3d:ce:c4:ea:c9:
d6:b2:a7:7b:5a:51:71:85:96:11:b0:4c:2f:a1:65:
9c:ba:d8:46:39:4e:6f:2d:3a:84:96:23:c9:ba:d9:
07:26:2b:9d:c7:8a:11:25:bb:08:4a:43:06:1e:0d:
d3:5d:51:2a:07:ad:a1:ab:74:74:28:d7:5e:57:2f:
f0:46:34:9a:f3:9d:f1:94:41:6c:3e:42:a0:b4:6b:
05:3f:e4:86:e6:35:10:e0:37:18:02:5d:3a:38:ed:
12:c4:3c:53:1e:32:33:8d:98:e1:b8:17:e4:a3:b0:
64:ef:1c:ae:11:77:72:77:1c:ef:61:9b:8e:cd:a8:
ef:d4:f9:f1:6a:98:24:a0:11:04:62:99:1f:73:36:
46:1c:94:17:9c:c0:9b:94:8d:67:37:ca:5e:3c:07:
9a:b7:14:77:c5:07:1a:20:81:1a:86:23:2b:e0:49:
b2:2f:a3:93:b3:09:dd:6d:b9:e6:50:63:1e:6c:6e:
65:54:93:8d:c5:05:1c:77:77:47:1d:80:48:8d:93:
00:40:6b:a7:98:3c:6a:be:5f:d7:95:7a:50:64:32:
68:75:e2:3d:f3:08:3a:9b:c3:bf:35:ef:f6:0c:73:
d3:bd:51:17:83:78:b1:b4:26:76:c1:07:51:87:ff:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:C6:83:82:65:E9:53:6A:98:EC:8C:2E:6F:1F:BF:56:DB:2F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl
X509v3 Authority Key Identifier:
keyid:A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1e:77:d7:0d:4a:8a:78:e8:c0:95:dc:a1:64:a9:fb:05:1a:
50:af:54:03:73:1d:9f:68:dd:d8:d0:ff:a9:b3:a9:0e:80:9b:
3b:f5:04:75:45:62:eb:f9:f5:86:f4:ac:3f:73:c0:51:99:d7:
4d:c9:08:a6:ea:f9:ce:d2:85:b3:5f:08:4d:e2:5c:e5:8d:6e:
6b:f0:15:2d:d8:eb:0a:54:40:22:53:17:bf:c6:bf:46:52:51:
b8:b1:94:b4:08:7b:99:84:16:de:fc:2b:b9:83:40:0e:4c:94:
7b:4c:2e:62:a1:f0:1b:3f:b9:7f:6f:22:49:fb:e9:42:be:2c:
6e:57:94:74:1e:09:10:07:6a:58:80:ff:bb:66:96:38:7d:83:
9c:30:9b:b0:c4:5b:4b:0d:4f:97:c2:35:2c:70:0d:f6:87:cb:
24:00:a6:1f:b6:94:b0:50:08:8a:83:97:ea:ae:a0:ce:08:17:
fe:87:ae:99:e4:79:d3:7d:4d:a2:03:fd:cc:3b:aa:28:5e:37:
fa:77:40:8f:e9:e8:4c:02:4d:27:c0:0e:a1:d0:1b:9d:15:ba:
69:14:e7:eb:b7:3b:3c:5a:fa:21:3a:5b:7b:7a:b8:d6:d4:5e:
79:25:c9:75:4e:01:ec:cc:7d:45:77:45:03:34:e1:c7:96:94:
c0:9e:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:18:00 2026 by rpki-client