
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa
File: cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa (raw, json)
Hash identifier: SEAoIfSJgPjsCbP0wnM84fthCgPmdx1cLsUn2q8OWuI=
Subject key identifier: 9C:2D:03:71:0C:4E:D5:57:ED:E9:5D:91:C0:A5:18:CA:63:4C:BE:D8
Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
Certificate serial: 010D0C9F4328584E46BF2B6125B2F301CE0A8700
Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa
Signing time: Wed 24 Jun 2026 09:00:12 +0000
ROA not before: Wed 24 Jun 2026 09:00:12 +0000
ROA not after: Tue 22 Sep 2026 09:00:12 +0000
asID: 25635
IP address blocks: 2605:5640::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:bf:2b:61:25:b2:f3:01:ce:0a:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
Validity
Not Before: Jun 24 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=237bfaf9-3d71-4671-8a7d-aa492f14fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:48:bd:cb:4c:3a:c9:f2:79:25:a2:3c:03:
94:32:0b:b4:46:2a:09:38:e6:13:ec:a3:05:d8:f9:
61:dd:9a:f2:a6:ba:b6:ec:46:e1:4f:a6:91:64:c8:
4a:8c:97:b2:35:c7:7d:99:dd:13:68:7a:9f:d7:4a:
99:6f:a8:5c:30:1f:0d:f7:1c:2f:64:46:3b:fc:f8:
f5:a6:2b:69:98:d2:c3:72:70:3b:03:c3:0e:ec:b3:
bc:ad:5c:a4:ca:28:21:4d:71:93:59:7d:82:56:75:
b3:72:42:57:21:00:d1:e3:c3:34:a7:a9:65:9b:0b:
52:7d:75:34:4e:76:a0:54:f5:ff:c6:a2:75:16:1f:
60:ab:ac:5a:ca:0f:42:67:be:27:00:d8:24:3e:9c:
96:18:ab:74:40:fa:df:2a:4f:d2:a3:53:2a:b2:be:
b0:1e:aa:aa:91:41:7e:a7:b8:e4:6a:6e:10:b5:23:
73:73:0f:98:16:e3:18:a9:22:77:0a:3e:5e:42:45:
13:cc:11:28:dd:64:9f:3f:99:ed:f1:77:8a:e0:e7:
b5:36:08:6c:5d:3d:5b:85:a5:e6:d9:4f:65:0a:b8:
1e:d2:d8:c9:f3:b2:23:51:78:d6:e4:0d:39:57:b7:
b7:f3:74:96:d0:a6:74:ec:cc:14:ec:61:c9:44:10:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:03:71:0C:4E:D5:57:ED:E9:5D:91:C0:A5:18:CA:63:4C:BE:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl
X509v3 Authority Key Identifier:
keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:5640::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:90:a6:75:29:b5:94:95:b5:f8:e9:ef:e0:43:7d:83:49:ef:
81:a1:b7:99:85:db:9e:92:97:d5:93:44:ef:52:78:2c:7f:9b:
29:20:09:93:6e:1a:e9:81:2d:6e:34:a1:b1:22:cb:04:fe:cd:
28:90:60:68:31:08:87:a4:c7:34:71:56:88:a2:fe:3c:54:1b:
91:d4:66:55:d6:ab:ab:32:10:12:ff:2f:e4:8f:5d:47:ad:e5:
6c:fe:aa:48:21:42:b9:d7:8f:d4:39:08:b7:2e:5a:9b:f3:1d:
55:b2:0b:c8:8f:12:eb:f5:c8:4e:e4:af:b8:d7:86:96:57:6a:
87:99:37:d8:75:0a:1f:32:02:b7:d9:72:50:d2:ab:f3:d0:60:
9e:7b:fc:60:90:de:6a:e3:fa:ee:5a:74:7a:57:63:02:81:a0:
e7:b1:19:39:e3:2f:df:35:9c:a8:13:e1:58:36:50:3d:16:04:
5f:da:38:43:e2:c7:55:2f:ec:e5:9f:e6:69:f4:18:21:1f:99:
7c:5e:c4:49:68:46:4a:59:66:03:e9:d8:7a:3e:d5:38:54:71:
16:dc:88:e1:e2:b3:f2:89:14:1a:a3:9e:2d:fe:b3:67:88:c3:
25:0a:0c:1d:b3:c9:2c:22:57:58:28:bf:73:33:44:fe:b3:a6:
b5:43:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:41 2026 by rpki-client