
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
File: defce0df-de38-3cba-952e-d0c411ab29b5.roa (raw, json)
Hash identifier: 14VI9QPY10dYWKohgkcZpREkjSTBhukdBIAnP1/IFCQ=
Subject key identifier: 25:FD:EC:AF:57:95:22:B2:4C:42:F6:EF:A9:95:67:9C:29:A3:ED:40
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EA78F673D96CA04E0692C9180
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16417
IP address blocks: 2620:101:2010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:67:3d:96:ca:04:e0:69:2c:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2cd8f6e4-9ce9-4567-91ec-b828f35340de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:96:04:8f:3a:80:af:f5:c7:e3:aa:7d:e0:
fb:52:a4:be:91:04:81:99:0b:42:86:b8:33:d1:4a:
51:25:6e:50:d0:79:1b:b0:16:58:47:d9:6a:d5:0d:
48:d6:b5:c6:b6:01:22:07:28:04:db:e7:4d:d6:85:
eb:ab:a3:51:90:0c:73:70:5a:93:6c:c2:83:ec:94:
ca:dd:1e:f2:d7:06:fb:d4:b7:da:5a:95:ba:de:23:
b4:11:fa:14:1d:1b:8b:a4:cc:79:8c:1f:0e:e8:cf:
bd:1d:4a:78:b1:88:97:40:0c:cb:46:b8:75:fc:0d:
e3:0b:8d:fd:dc:51:20:b1:93:07:93:ee:68:57:7b:
62:f5:09:a0:87:9c:53:b0:4f:36:18:e3:91:8b:8e:
30:28:5a:66:9e:96:a8:b9:3e:b6:34:d8:b4:01:14:
bf:1e:d4:24:30:ba:98:aa:ed:9b:97:84:da:01:8f:
a3:01:fb:69:a8:de:7a:a8:de:58:35:92:31:09:ae:
01:5c:18:c1:1d:6e:df:43:63:28:0b:6b:11:18:2b:
30:89:60:cb:09:67:90:83:da:ed:38:82:90:6a:d8:
9f:e2:56:a8:0e:56:4d:1c:e1:78:f7:2e:96:e7:87:
d7:67:64:c5:1e:0f:a4:38:1d:f1:a4:10:6a:22:6b:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:EC:AF:57:95:22:B2:4C:42:F6:EF:A9:95:67:9C:29:A3:ED:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:2010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:eb:1b:74:fc:b6:03:df:fc:8d:9c:bc:83:6a:b7:86:79:5c:
53:e2:cc:d2:8d:f8:4b:50:c5:f8:e2:c3:d2:11:76:1a:a3:d2:
5c:df:2e:1c:a1:0b:e7:c9:2c:f4:5a:98:02:89:90:b5:d8:ce:
53:67:75:98:c1:b1:bb:66:5d:62:c7:ee:c5:b4:c6:df:89:43:
90:12:94:bb:e5:bd:1a:8b:2f:90:24:b2:0b:9f:2f:a8:30:e3:
ed:19:47:fc:6a:14:24:ad:17:3c:26:14:f3:45:6b:f5:6a:0d:
e0:e7:43:af:5d:64:6f:0c:e9:a1:c0:30:73:ef:b3:1f:95:8b:
0d:09:33:b5:da:d9:70:d2:fc:e3:b9:d8:e9:de:d0:0e:12:02:
20:9e:1b:30:1a:c6:bb:e3:0e:96:45:4d:e5:64:eb:66:8e:35:
cc:5e:d1:b8:fc:08:b3:66:5c:06:92:5a:25:b9:9c:af:ea:ec:
2c:a4:fd:9e:4f:f0:31:fd:54:0b:eb:e2:98:01:61:9f:0e:1a:
7e:c1:77:0b:5b:f4:55:40:50:78:62:7b:29:7f:f2:77:10:bd:
fd:9c:cc:dd:34:b6:26:95:d3:23:11:04:b5:ab:be:81:3d:2f:
d2:73:bf:d6:4c:20:ef:14:d3:10:8f:a5:18:11:2f:fe:eb:ab:
5d:e5:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:26:23 2026 by rpki-client