
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa
File: 851a5dbb-1503-38ae-9cf5-4922079a2740.roa (raw, json)
Hash identifier: lKkQXTd5cuNIwR5F50z0Dr0PA2ghxV7zbZuvjFQDbmc=
Subject key identifier: AD:14:4B:64:FB:82:2F:76:06:AD:06:06:DA:96:3B:9E:F6:8B:26:40
Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial: 010D0C9F4328584F14678C63478E567C59A81980
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 36610
IP address blocks: 2607:fd08::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:8c:63:47:8e:56:7c:59:a8:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=32b395d5-04a9-404e-be9c-83470c31cc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:16:80:07:6d:45:1c:2d:f4:25:a8:43:ab:
38:04:d9:4d:f4:c7:73:bb:2b:03:12:a5:26:34:89:
ad:1e:7d:4c:7f:0e:27:da:9f:88:bf:1c:87:5a:c9:
0b:a5:9f:c1:96:15:a9:4f:17:89:43:48:a4:9d:bc:
43:a4:6b:da:51:e8:98:81:f4:42:58:29:50:9e:9c:
c9:5f:0b:1e:c7:26:a5:38:56:d2:17:29:15:0b:5c:
99:ed:8f:64:b0:ef:4e:05:d4:f5:e2:88:0a:6f:a4:
74:96:bd:ee:20:88:5c:ee:af:88:51:67:eb:4d:cd:
94:5e:e0:e0:7d:0a:3c:45:7e:33:a6:72:64:3e:31:
97:f3:23:2a:01:5e:56:47:45:12:fd:ea:c4:66:c3:
a2:77:e1:98:99:5c:65:4d:14:c8:97:7d:af:8a:31:
31:03:86:69:db:80:78:a6:2c:0f:17:85:f5:67:22:
87:49:42:b9:dc:a0:47:15:76:8c:fc:73:78:6f:a0:
1c:60:3c:f6:80:89:03:a3:d5:7b:bc:87:01:c1:b8:
7c:d6:eb:39:75:dd:73:05:c0:53:97:a0:c9:7e:ee:
62:75:a5:5d:52:eb:ed:95:1b:f8:24:f5:9a:32:02:
6a:07:cc:fe:46:2d:b8:2f:63:cb:31:90:a2:03:a8:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:4B:64:FB:82:2F:76:06:AD:06:06:DA:96:3B:9E:F6:8B:26:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
X509v3 Authority Key Identifier:
keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fd08::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b1:11:48:80:a1:9b:53:61:d9:01:19:ef:8b:eb:75:98:6c:
97:62:31:ac:a2:81:71:89:74:08:ef:38:a4:41:2a:a9:9f:75:
e4:ca:ca:0c:3a:a3:4c:f7:40:1c:e4:a2:40:ee:90:09:e1:de:
1d:d6:bc:98:c4:2d:1d:e6:e8:9f:c1:56:c3:5b:be:59:a9:b7:
cd:35:ac:88:83:b5:10:e1:1d:10:dd:e7:7e:9e:94:80:7f:a9:
fe:d4:70:fa:94:d8:c4:51:bd:87:d7:d9:c5:8e:96:e3:5b:ec:
25:eb:9c:d0:35:9c:a8:1f:d8:5b:6c:ea:cf:3e:3a:d6:46:a7:
90:a9:62:7e:61:97:78:1a:13:cf:20:a8:f2:3e:38:1f:4d:fa:
82:f5:3c:40:19:c7:27:cb:11:93:a1:7f:d1:0d:08:9b:fe:2f:
bc:8d:52:e5:d6:63:ce:e8:ca:8b:7c:b0:97:0c:bd:0e:eb:e9:
62:f9:3e:b3:c4:f8:cc:91:77:27:9b:09:95:29:e1:fb:f2:a4:
b5:48:4c:c7:f1:f4:8e:ff:93:3f:aa:d0:4f:28:17:5a:16:ac:
e1:b4:95:91:99:24:24:1c:2e:d6:14:02:40:75:7e:e8:1b:df:
b7:ab:e4:e0:ac:41:a9:a0:b1:d8:a7:b5:10:3a:a8:b0:fa:46:
21:41:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:24:20 2026 by rpki-client