
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa
File: bf7f3f32-7977-3022-acfe-63176d0b6222.roa (raw, json)
Hash identifier: 3FI1QClw6SvWnTfSQjA4PwYoqNEKv3b741K79cmOPrY=
Subject key identifier: FD:36:32:46:E7:7E:CE:D1:49:82:3A:45:AB:66:77:74:37:FC:98:D5
Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial: 010D0C9F4328584ED001EAC18C2622F67BA27A80
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 63290
IP address blocks: 2605:c880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:ea:c1:8c:26:22:f6:7b:a2:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=ed9e673a-c832-4c9f-8a9f-7acad8386df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:ab:1d:64:6f:bb:f7:20:7c:b1:b4:a4:58:
f5:aa:8e:db:e7:c6:fc:dc:bc:9d:f6:63:bf:e8:89:
09:54:cc:de:4a:43:77:85:e9:65:3f:17:22:49:98:
00:73:b5:62:dd:aa:41:9e:41:d6:55:2e:fb:b5:d9:
5c:57:22:24:14:ce:e6:78:76:a7:34:66:5a:a6:71:
c6:c2:97:31:33:43:65:33:d6:5c:9a:1f:0c:c9:e1:
00:38:a5:59:06:37:a7:f4:fc:af:0b:5a:53:21:d4:
6b:17:54:8a:74:3d:e6:ee:b5:93:f0:c0:4d:ba:70:
af:17:d3:7c:3c:a0:6b:34:de:a8:e6:12:87:3a:94:
4e:5f:04:6a:a8:df:4b:27:a8:b3:30:56:90:89:dc:
b8:9b:45:42:9f:87:0e:50:cc:1a:37:8e:e7:91:d7:
d8:0a:a4:f4:58:03:63:67:d4:61:b7:2e:11:77:cf:
2a:a7:22:89:bc:1e:5a:11:41:c1:48:f9:2c:c0:d3:
48:d7:c8:10:bf:8e:bc:f6:0d:b2:98:18:c0:45:0a:
23:b0:a0:3a:2e:7f:9a:c6:93:c9:5f:63:10:a9:1c:
2e:b0:03:d4:46:32:be:dc:30:e7:57:df:91:3d:52:
e6:da:1a:eb:2b:99:7a:33:74:93:c6:43:dd:84:35:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:32:46:E7:7E:CE:D1:49:82:3A:45:AB:66:77:74:37:FC:98:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
X509v3 Authority Key Identifier:
keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:c880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:25:8f:8e:3d:84:4b:ef:ae:a5:4d:9f:38:55:a4:4f:2c:a7:
1f:93:38:32:68:c4:cb:10:50:c6:34:a5:d6:9e:e6:ea:1b:4b:
26:5c:04:26:19:15:71:46:c6:ad:a5:78:33:96:4c:eb:ff:d6:
de:4b:30:3b:5f:95:31:6d:ab:48:da:3c:18:b3:11:5e:e4:0a:
32:d9:0f:b3:1d:5b:bf:19:e4:a1:e7:4a:36:f1:dc:f3:1a:f4:
8f:97:82:08:4a:0c:1d:a3:15:76:11:d8:5d:53:c5:a1:77:1b:
81:3a:11:45:15:6e:e8:87:7a:7d:9d:36:c8:99:8b:d1:16:a8:
64:9b:34:84:ab:88:fe:83:75:4b:9b:6f:83:3e:45:ec:9b:39:
58:1f:b4:54:22:7d:e9:68:69:e0:08:89:e6:f4:c0:a5:35:77:
0a:a4:b9:ec:e1:ab:98:18:6d:b8:4d:a3:7b:78:12:ab:fc:2d:
42:dd:fb:e7:3b:4a:08:c7:85:05:fe:42:c1:91:94:69:97:37:
15:91:a4:94:7c:a1:f9:82:68:80:b6:d8:30:d6:c9:05:a5:79:
b9:1c:80:18:d5:45:58:44:5e:8a:7d:5e:ad:be:f1:0f:26:9f:
75:25:dd:e9:e7:87:78:7c:f4:26:bd:61:34:fd:81:5c:e8:1b:
39:45:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:38 2026 by rpki-client