
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
File: ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa (raw, json)
Hash identifier: QSlPjQF0Tl9j3mxi5qkZTCmPG8xiPEFChpoQe02V5vA=
Subject key identifier: 0A:82:79:3B:5D:57:61:A3:85:C4:18:B7:97:E4:36:19:A1:8E:94:FB
Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial: 010D0C9F4328584EAA51A25FD35CCE88A060B278
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 2607:6bc0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:a2:5f:d3:5c:ce:88:a0:60:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=71e145d0-78cc-44ab-a6c6-be37da891ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:e8:33:99:fc:5f:d4:55:d1:2a:30:55:e7:
25:85:f9:80:c0:90:66:7c:c8:2b:a5:f3:2e:b9:f7:
be:a7:a9:56:17:6e:62:3e:7a:dc:dd:0b:9e:b6:df:
fb:46:3c:90:be:5c:65:72:17:d1:fd:1d:38:8c:c3:
22:3f:47:77:80:17:b3:1a:fa:fc:25:fb:7f:fc:8a:
21:6f:b0:df:dc:b8:52:ec:46:2b:1b:a0:57:fc:21:
8f:44:b6:91:30:61:eb:83:69:9f:a1:8b:ea:2f:a2:
bf:fd:ee:0a:6c:48:96:75:05:ac:3f:ec:1f:80:bc:
ea:4b:43:7d:e1:6f:94:cc:9d:01:e0:cb:05:46:f1:
dd:0d:14:bf:d3:66:36:53:79:cd:62:e8:75:21:58:
71:86:8b:40:a2:7d:98:d2:38:ab:8f:a8:ca:5a:df:
b9:41:c4:d6:72:93:59:47:98:db:00:8a:1e:b1:4a:
1d:c8:3b:f9:f1:44:96:ef:aa:1f:f1:d6:ed:a1:ce:
6e:9a:7a:f7:3e:eb:3a:b8:d1:f4:b8:4f:3b:5e:c1:
57:79:fe:74:5d:18:7a:c5:b0:2e:84:da:e0:32:be:
b4:ec:c8:a6:f2:74:8a:5f:87:ca:99:de:75:6e:d6:
cf:e8:8d:c8:c2:f5:f5:95:ce:2f:1b:bb:e0:79:ec:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:79:3B:5D:57:61:A3:85:C4:18:B7:97:E4:36:19:A1:8E:94:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
X509v3 Authority Key Identifier:
keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:6bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e0:ab:f1:6c:4b:40:9b:29:d8:d5:79:83:56:31:5b:85:88:
32:d2:30:16:9a:66:1a:39:c8:0b:72:4c:9b:7d:f2:04:73:a2:
00:a7:81:a5:f6:f8:26:eb:c1:e9:4f:f4:51:7c:ae:8b:18:11:
af:f0:8b:4a:f0:d7:9c:4d:33:84:73:d1:8b:ce:02:25:4b:6a:
86:ab:c7:c1:0f:06:bd:80:be:ee:4e:66:87:50:57:71:88:ae:
b6:34:4e:57:2c:12:e9:b5:b8:77:0b:f7:f9:e7:c3:50:95:37:
02:d6:53:d5:46:da:6c:bc:17:6b:d7:c1:2d:a0:6c:c5:bd:a1:
40:c0:75:2f:6d:e7:5d:9f:2d:e4:f6:01:d6:27:ee:3d:f1:39:
82:46:7f:8d:b8:13:a7:0e:b5:22:dd:3a:6b:3a:c5:14:a1:81:
66:01:5f:ee:56:d3:93:c2:1d:a7:ce:e1:7d:bf:cb:06:c2:d6:
d6:82:ac:40:34:96:16:c4:ae:7a:e6:5d:23:cc:92:71:2a:65:
a8:d6:ad:8b:a9:b8:13:0b:93:31:df:c4:21:96:40:7a:30:d4:
bd:f1:1b:05:85:aa:06:c2:83:82:ce:0b:04:53:c6:0b:86:47:
57:47:1e:3b:4a:52:79:1e:d7:26:93:60:bd:ef:0b:99:5b:ab:
7e:5b:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:23 2026 by rpki-client