
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
File: 557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa (raw, json)
Hash identifier: AWxXT/NXuPjf7qJO3C1+wvWApoyF5DVhQZn8zPYJ1pI=
Subject key identifier: EE:E8:5D:CC:F1:E3:26:EE:09:5D:D8:97:BA:9C:8C:A0:C0:21:27:48
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EA0154FF8F3B64A896F809A80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 16417
IP address blocks: 2620:101:200c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:4f:f8:f3:b6:4a:89:6f:80:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=45d72abd-b4b8-4d43-9925-fbae94bafe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:03:1b:79:44:9d:c5:e8:de:6a:20:43:31:
aa:4a:49:51:ec:4f:94:a1:d4:3a:23:b1:8e:ad:8e:
93:47:0f:18:42:5e:70:c6:8a:a9:e9:28:4d:88:ff:
33:9c:5f:b1:04:90:88:fe:d1:c3:0c:dd:d9:1f:e8:
ef:f5:4c:7d:d6:b6:6a:ab:20:3e:a0:c3:31:70:7f:
f6:08:84:82:f2:55:91:d3:42:33:26:eb:70:3b:3a:
ca:60:ff:bd:06:24:55:e7:3f:d7:63:93:55:80:6a:
9d:fc:00:f2:9c:35:d6:5f:c4:03:4e:ba:81:f4:47:
dd:52:1f:81:ba:e3:96:2b:26:4b:ac:50:39:39:11:
ae:74:66:8b:42:56:d8:7b:6f:ef:50:75:35:f8:f4:
36:da:21:e3:3d:9e:79:7d:76:54:ef:5d:88:8d:2a:
0a:3e:d0:f0:d7:67:a0:bc:c0:45:4e:36:a3:e2:4f:
45:fd:0b:3a:ac:85:74:a1:f1:a1:a2:ea:f6:00:d8:
d5:1a:96:4e:fa:2b:86:7d:22:11:d8:94:c8:05:66:
ee:53:0a:b3:f1:19:3a:29:95:91:3f:5d:6e:ce:af:
28:93:4a:c8:47:75:4d:95:b6:3a:dd:f4:90:c3:70:
8b:92:0c:33:46:1b:53:ad:56:4d:9f:0c:20:4b:2c:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:5D:CC:F1:E3:26:EE:09:5D:D8:97:BA:9C:8C:A0:C0:21:27:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:200c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:88:99:ff:c2:cc:0c:44:63:19:4a:86:72:15:7f:cf:b6:a3:
01:ee:f2:2f:65:69:c0:52:54:b1:39:ad:c9:63:88:44:4a:d6:
98:ba:87:b9:87:ad:32:22:8d:03:56:e5:9b:51:de:0a:dd:04:
46:50:ec:3b:0b:f8:a6:4a:07:19:a7:c4:01:79:69:0c:33:61:
74:84:77:76:80:19:94:af:b8:ed:cd:ee:fa:f5:0c:63:37:56:
09:2b:e7:6b:32:48:15:71:86:27:78:b4:65:ab:b4:db:68:bf:
c6:65:4b:fe:51:4d:c5:03:4c:aa:c7:05:ab:80:94:8b:83:9c:
c4:d7:ff:65:f6:c2:eb:32:30:ff:7c:13:fd:df:d0:7a:34:0c:
c4:6f:bd:29:99:d5:2e:7d:6c:e5:2e:af:61:d9:5a:cd:b2:d6:
70:87:c3:fa:87:51:73:ee:1c:29:98:8f:24:c7:5c:43:2a:81:
bb:01:93:bc:0d:94:b6:93:bf:f5:0a:54:ed:45:2f:8e:47:d2:
0c:d1:ed:06:b5:87:6c:02:93:09:b1:dd:23:38:7c:c5:cb:7e:
ab:5d:33:88:00:ec:3a:46:68:19:18:42:a9:64:c5:3f:7d:81:
7c:c0:57:c5:78:09:ad:89:ea:ce:01:65:9c:98:d7:35:3d:7b:
89:00:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 15:10:55 2026 by rpki-client