
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa
File: c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa (raw, json)
Hash identifier: e5daU54vOtRRVH83A4ceQlmVShF+1mHwTm0Fj/21UUY=
Subject key identifier: 25:0B:5F:C6:4F:3A:2A:85:75:CB:A4:E7:42:FD:FB:CA:09:AA:F9:B3
Certificate issuer: /CN=67e403a1-9185-4f5a-9910-5089c51f9fc3
Certificate serial: 010D0C9F4328584EB2B1B0183EAC8713A89D6F28
Authority key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 81
IP address blocks: 2602:f64d::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:b0:18:3e:ac:87:13:a8:9d:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=08ce6ff0-b86a-4f39-b915-abbea93eaf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:7a:1c:01:6e:a0:4c:06:1a:cb:06:2e:e9:
e4:03:f0:0c:1c:d1:b3:03:31:f8:b1:72:db:74:ae:
de:35:ee:a4:6b:96:27:4a:e2:b5:fc:e7:75:8c:38:
51:14:b4:04:7a:11:47:b0:32:13:50:7a:c1:3d:13:
5b:51:87:3b:2d:81:ae:4e:f7:a2:18:6a:83:81:5f:
ad:88:af:ee:fe:80:de:c3:20:a6:1d:b7:a4:ec:09:
62:5d:52:c3:83:3f:39:ca:91:31:68:36:5c:d4:f1:
43:34:a1:54:8e:09:76:1c:77:78:a5:6c:b7:61:20:
5d:01:da:0f:d7:12:77:f3:a2:2e:5d:35:89:3a:94:
cb:09:58:39:c6:89:e8:f8:20:f1:53:9e:42:25:af:
44:de:09:82:bb:64:f8:9f:59:62:63:0a:d5:d8:e0:
f0:0b:0b:af:3b:25:83:9a:44:1b:76:11:09:7d:bd:
9a:a2:c5:63:d6:e7:e6:a1:b3:3f:01:08:ae:f9:be:
bf:10:bb:bf:70:78:1d:fe:e4:a0:7c:3c:17:eb:93:
e5:b2:19:05:28:1f:6f:3e:9a:8f:14:e8:4a:fd:0a:
9a:c4:bd:d5:57:f8:fe:2f:e5:0a:6c:17:07:f4:2c:
e1:c5:d2:b2:0c:16:0f:da:eb:f3:d1:07:88:4e:88:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:5F:C6:4F:3A:2A:85:75:CB:A4:E7:42:FD:FB:CA:09:AA:F9:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl
X509v3 Authority Key Identifier:
keyid:1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f64d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d1:ea:31:ee:ea:fc:d3:59:fa:6f:3e:8e:bd:09:f7:7e:93:
58:b4:ef:68:b5:24:9e:66:3e:db:1e:96:b3:53:9a:51:70:af:
5f:64:39:ef:7e:33:ee:b7:9c:19:a2:d5:4c:98:ed:a8:53:6b:
91:19:f3:b0:05:d6:c2:da:8d:43:b9:c2:2f:e4:2e:5f:b9:36:
69:e6:47:99:ab:c0:ef:06:6d:15:25:33:13:00:b7:5c:24:f6:
20:3c:cd:62:44:37:d6:65:02:2e:bd:0d:13:96:7a:b0:bf:00:
c4:da:8a:b3:9a:fd:e3:ce:ef:49:e2:4f:19:4b:4f:f1:0d:56:
d3:51:2e:20:77:a7:2d:c2:8c:3b:bc:0b:5e:15:d2:90:2c:1a:
c6:a7:95:d0:c9:40:db:05:c1:03:7e:e6:6b:25:8f:43:98:77:
79:a5:8d:13:fd:4c:fe:73:94:80:ca:d6:9e:ae:e2:f2:1d:f8:
e6:73:c7:13:42:a0:db:24:2f:63:db:65:34:35:ca:06:0e:51:
7a:34:61:0f:ee:6a:bf:ca:0e:64:b6:8a:2c:0d:b9:57:78:72:
38:21:24:99:2e:57:2c:b1:bd:63:69:3a:80:e7:03:9c:74:30:
65:f6:e5:b1:10:6d:33:dd:0c:36:c2:37:2a:2e:1f:fc:82:37:
48:47:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:44 2026 by rpki-client