
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa
File: 2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa (raw, json)
Hash identifier: EiAm9+p8D3S7O1gIxf0/sBaJKHKeIqVeK9DJP3Gt34w=
Subject key identifier: 01:28:DB:FC:44:FE:BE:32:23:23:AF:92:1B:37:73:99:7D:45:4D:EA
Certificate issuer: /CN=4a595a80-2106-455a-be91-2aa623280126
Certificate serial: 010D0C9F4328584ED001D00467DE6F8FC826DF80
Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 2604:11a0:1000::/40 maxlen: 48
2604:11a0:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:d0:04:67:de:6f:8f:c8:26:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a595a80-2106-455a-be91-2aa623280126
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=3235ac28-ea90-44a3-b13b-fd260a858c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:fd:d2:4c:21:a5:47:8b:a2:2f:46:a3:af:
b7:a0:5a:38:08:34:29:84:57:e8:2a:55:95:3e:b3:
91:4d:59:ee:e4:52:89:70:62:47:2b:1d:cf:2a:49:
ef:b0:e4:72:f3:c9:50:61:23:86:8e:96:ff:87:b3:
0e:d3:f5:6b:e1:dd:60:81:52:26:d8:7a:19:a7:f3:
da:27:19:6f:e3:4e:70:a6:81:a6:a1:2a:66:3b:01:
05:38:4d:2f:8c:a1:47:8c:8a:6e:b9:d6:5d:91:ae:
c6:df:6d:b9:00:5c:4c:5b:9f:3e:ca:c5:9d:40:f9:
e6:c0:59:df:95:ba:f3:c0:7a:55:d4:bd:64:ff:ae:
61:14:4c:2e:1a:11:10:67:de:7d:db:c9:de:02:18:
88:9f:f2:91:99:fe:f9:39:44:5e:eb:46:4a:1b:3c:
0a:53:a6:03:6a:b9:75:6c:7d:8b:77:51:f3:62:f5:
6d:9d:38:ac:dd:ad:9d:3d:26:1e:42:1a:da:f1:39:
2d:54:21:5b:a5:bf:21:ea:a9:76:90:b1:de:78:62:
c0:7b:28:bb:b7:f7:85:38:1c:f0:2c:de:ee:8b:32:
0f:8f:1a:a8:46:95:1f:e1:fd:c0:38:07:1e:69:86:
ed:25:de:59:d5:4f:5e:f8:0b:f0:ed:4e:46:2c:46:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:DB:FC:44:FE:BE:32:23:23:AF:92:1B:37:73:99:7D:45:4D:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl
X509v3 Authority Key Identifier:
keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:11a0:1000::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:4e:91:a1:f1:6f:4c:13:b1:ca:f4:fb:b3:b1:df:ae:f4:83:
cb:3a:98:73:15:99:72:39:2c:3b:58:b9:9a:a7:75:9a:9b:7c:
02:15:7a:4a:46:24:8a:99:a3:cc:0b:1a:29:d0:63:d7:05:0b:
6f:34:fa:74:8a:b4:f2:07:48:91:09:d2:bc:53:80:fb:77:4a:
07:a7:5b:4a:5e:5c:38:3a:94:7d:d5:2d:a6:d6:46:28:11:27:
5c:c1:31:a2:16:1f:1c:73:ba:95:fe:6b:a7:06:04:16:d6:0a:
33:f8:e5:bf:b8:12:4c:ba:70:76:bc:ab:c7:2e:72:1e:35:98:
61:ed:dd:19:2f:43:86:83:dd:3a:34:ec:8c:24:20:ad:f3:1d:
f5:22:5d:48:00:2b:40:ff:01:0a:9f:c5:87:2d:d0:35:6b:d5:
f0:d4:01:96:4e:24:82:a8:85:d4:5a:63:ff:9f:f4:b4:04:b9:
73:7c:36:b7:45:84:0f:47:5f:60:86:4d:5a:b0:f4:00:af:01:
b9:14:fa:23:fc:40:44:8c:15:a8:b5:97:85:20:b9:ec:a2:5d:
e4:81:d6:80:0e:f8:b1:b6:d2:e5:93:5e:63:4e:6c:9c:80:1b:
bb:fa:6c:74:d7:3e:5b:c3:63:0a:82:70:50:99:46:1f:3d:e1:
e4:c5:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:15 2026 by rpki-client