
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa
File: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (raw, json)
Hash identifier: B9KgkFpYlgF3GkO4N1VDiThKosINmPo5jvfe1WQzxDw=
Subject key identifier: 7E:53:2E:D5:CC:14:32:7D:5A:F4:FB:A5:A6:7D:54:15:8D:4D:8E:A0
Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
Certificate serial: 010D0C9F4328584E6C6F73B543981CBBE7D69F40
Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa
Signing time: Tue 07 Jul 2026 21:00:13 +0000
ROA not before: Tue 07 Jul 2026 21:00:13 +0000
ROA not after: Mon 05 Oct 2026 21:00:13 +0000
asID: 40021
IP address blocks: 2605:a140::/28 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6c:6f:73:b5:43:98:1c:bb:e7:d6:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
Validity
Not Before: Jul 7 21:00:13 2026 GMT
Not After : Oct 5 21:00:13 2026 GMT
Subject: CN=c0123893-0ebc-4ad1-87a2-ce4942c68aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:e7:c2:1d:6e:8c:e5:53:d6:79:22:9d:ac:
9e:8e:c9:e6:ea:96:37:8b:a9:55:b2:55:63:87:0d:
1f:bb:78:cd:96:03:8e:a9:66:ed:8e:df:c2:7d:c1:
90:ed:01:11:b6:9a:ef:ce:d4:07:94:e3:e2:a7:ea:
9b:e8:89:b6:4e:c9:fd:41:09:93:a8:41:47:a5:8a:
07:ef:d7:fd:0e:0c:47:71:60:25:1b:f4:76:b8:1e:
e7:be:e3:b5:5d:13:42:10:7b:ce:e8:ea:c2:93:02:
83:b3:57:0d:f6:2f:dd:3c:66:01:98:9b:20:ca:44:
73:df:dc:49:59:9b:f4:66:02:52:ef:4e:72:8b:a5:
ce:a0:52:66:fb:60:ad:3f:d1:e7:0e:dc:d5:0f:ef:
77:b1:f6:5f:6a:7f:90:82:99:3d:ad:c5:95:5e:8a:
50:fc:70:05:4a:39:12:d1:f7:62:c1:8d:7b:dc:bd:
f3:a1:46:f0:38:81:2c:ff:86:30:7d:7e:34:60:30:
7b:cd:64:fc:2a:98:39:8f:a5:41:b3:65:b3:8e:e4:
a8:da:e0:5d:ab:e9:67:6c:5c:f5:0d:54:fd:fb:5e:
da:75:75:78:2b:22:19:fc:aa:bf:a9:b7:b6:63:11:
10:cc:fe:73:8c:ad:ed:97:fd:d7:4a:be:7a:24:14:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:2E:D5:CC:14:32:7D:5A:F4:FB:A5:A6:7D:54:15:8D:4D:8E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl
X509v3 Authority Key Identifier:
keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a140::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:33:3c:3f:6e:90:44:85:df:05:e1:7f:58:9f:71:be:9f:f1:
b6:e5:2c:13:02:b9:05:4d:5c:c4:be:44:f6:ab:70:37:bf:5a:
cb:d8:a7:c4:fc:ad:9c:49:8d:c8:56:a3:13:90:76:51:7c:53:
57:81:8f:0e:94:50:87:1f:1a:04:42:7d:7c:e6:0e:27:d6:26:
cb:c0:f9:c1:d5:2c:21:ae:46:6c:17:d0:1f:3f:5b:75:53:7a:
e8:e4:24:58:af:ed:44:b7:84:3c:1d:4a:ab:cc:1a:56:13:22:
5f:14:2c:a5:f6:df:df:1a:99:48:f6:3b:cb:c6:30:9c:9c:f0:
02:be:ed:71:82:d7:22:05:9d:66:22:92:83:91:9f:09:9c:c5:
9c:1a:8a:94:a8:c2:bd:fb:4a:2d:cf:83:44:53:ac:80:70:86:
15:ec:31:1e:cc:e2:7d:5a:ed:ef:54:9b:f2:ce:2e:f1:ca:9e:
89:e7:8a:6d:1e:1d:61:3e:0a:01:d9:f9:85:c4:c4:c8:73:5e:
aa:4b:83:c3:d5:10:e7:bb:65:fe:d2:5f:88:88:cd:21:ba:79:
76:d6:72:96:50:78:00:82:c8:d0:7b:d5:a4:97:af:e7:49:cc:
97:89:87:a4:0e:51:86:50:a8:c7:c1:8f:ce:e6:e8:df:60:05:
b0:1f:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:23 2026 by rpki-client