
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
File: 5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json)
Hash identifier: C8SNcSHTSj9qHu7OVwF8EAFjST1JSzC7zQbVtfiroMI=
Subject key identifier: EC:4B:17:FE:3E:39:3B:93:A5:62:77:08:81:95:EA:96:6C:B9:FB:4D
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584E4559EA6D207F3317B0655EC0
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 399989
IP address blocks: 2607:340::/28 maxlen: 28
2607:340::/29 maxlen: 29
2607:348::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:ea:6d:20:7f:33:17:b0:65:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=2e3b02cb-80c5-41be-940d-84e9f5534001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:79:60:69:d6:da:82:ad:26:6d:52:32:89:
3e:45:84:2a:e3:95:80:d4:3b:0f:61:3a:5c:2a:99:
8e:1b:82:2a:f5:c6:58:c1:1a:1c:7f:c7:b6:3b:c0:
7a:94:e6:eb:93:15:b5:db:d4:e5:4a:e9:a1:3c:95:
52:a9:ad:81:26:39:03:f9:35:f4:aa:e8:fe:a0:4b:
a2:ce:16:71:a3:26:20:b1:48:7c:44:78:ca:7b:83:
27:fb:5a:93:12:e7:2c:66:05:23:c2:69:53:8a:db:
1c:d7:9c:1a:71:85:a7:75:4b:db:37:4d:72:49:bc:
a2:b2:93:de:39:19:8e:0e:56:10:00:d7:b2:f9:9d:
49:79:21:12:7d:7d:26:9d:54:29:73:e8:66:5c:ae:
19:12:a4:6b:b5:25:db:de:53:88:01:99:22:e7:9d:
45:78:fb:cb:88:fb:b4:87:4d:ed:c2:01:ef:51:9f:
85:2e:ce:46:22:a6:d2:ac:98:8a:8f:31:46:5f:f9:
ad:17:77:50:88:b7:7b:9a:d6:de:fc:90:27:c3:5a:
41:0f:65:b8:76:05:c1:bb:ef:a0:f6:1f:c6:c0:ce:
fe:f0:75:98:38:78:a1:19:93:af:d5:0e:cc:08:a0:
ff:f2:f8:2a:5d:37:13:65:b0:4e:26:ac:04:0b:9e:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:17:FE:3E:39:3B:93:A5:62:77:08:81:95:EA:96:6C:B9:FB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:340::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:10:a2:98:bd:91:62:9f:99:f5:2a:2f:03:02:6b:06:a6:64:
2c:06:26:b7:8e:d2:35:32:2c:57:84:fd:52:2a:35:da:4f:1a:
b1:6b:c8:dd:ba:c5:aa:77:08:74:cf:a5:c0:f3:81:d0:1d:e2:
34:1e:b3:ba:a6:8f:46:e0:f1:75:2f:60:76:a6:c3:b1:60:6e:
36:df:d9:6e:95:26:bc:e7:eb:e9:b7:6c:b6:e2:6c:0b:ad:7f:
7a:3b:c6:98:06:ac:40:10:a5:f5:f6:10:80:d6:c0:bc:a3:04:
d7:2d:00:c3:6c:79:81:6a:5d:f3:3e:a5:fb:a4:cb:d5:bf:df:
a6:aa:3f:72:79:af:d3:ae:56:fc:31:59:35:b2:31:c0:6e:cb:
44:ad:8a:ba:06:34:53:6f:26:35:ee:0f:b0:c0:81:f8:03:cb:
a3:6f:78:4f:d4:e1:3c:e9:00:85:aa:03:5a:4b:ba:54:bd:e4:
fd:10:15:03:24:59:8c:be:57:c0:a3:69:19:70:cc:c0:3d:fd:
30:f1:9e:71:8c:59:f1:fd:a8:10:c3:b7:c1:ca:48:ba:ef:e3:
c3:80:92:16:d1:b8:a4:a6:ae:2d:19:62:2d:97:52:07:24:d9:
27:58:43:63:fe:bd:57:b4:0e:41:2f:00:4d:d8:99:65:c0:0d:
ca:20:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:31:10 2026 by rpki-client