
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
File: 0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa (raw, json)
Hash identifier: +M/DQ1lHYr8OP7zbtUHJvFEIFp5iW30kcpeayp4BGsA=
Subject key identifier: 12:FB:6D:A4:11:63:E8:CE:89:3E:E9:12:8F:99:E8:ED:AE:27:9E:EC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3D68F02F6BB2D4B1E52C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 2604:2d80:2000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:68:f0:2f:6b:b2:d4:b1:e5:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=d006603e-9428-4b41-915d-f3ea99174693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:f8:4b:81:37:f6:ca:c9:29:87:14:31:09:
43:82:99:bb:ac:30:97:b1:d2:88:97:f3:f2:76:0e:
90:6f:c4:c8:da:03:20:ac:0e:73:1d:dd:29:c9:48:
eb:47:e0:d5:fe:4f:b6:40:03:36:e5:67:9f:78:79:
31:44:b1:46:99:24:af:2c:7e:3a:76:51:3e:7c:07:
1e:7e:17:1b:44:b8:d1:f6:b8:fa:c1:5e:06:27:0b:
bd:02:70:c5:93:17:76:45:21:70:7f:6e:d2:1c:c8:
1a:87:1a:e5:b6:93:96:6a:25:65:ce:48:3d:2e:67:
7a:15:0d:28:8b:97:69:4e:70:e0:13:f2:90:2c:e0:
40:dd:6c:05:d6:88:20:0c:55:ea:b6:f8:60:6b:ed:
0f:05:34:9e:ba:ac:6a:d6:87:4b:69:54:d4:66:52:
e4:01:b1:7f:75:f2:cb:0c:73:2d:da:4a:a6:16:f9:
2b:c8:d5:44:06:71:57:1f:fa:ab:37:d8:d6:65:cf:
e6:3a:b0:9e:3b:48:9f:28:61:d3:f0:49:a9:45:e7:
a6:7b:9f:53:87:c2:84:2c:ef:a2:1b:5c:e4:09:73:
f1:ce:a7:9a:e0:ed:2b:3e:ad:b6:3e:bb:dc:17:26:
c5:ad:9f:fa:8f:ae:b0:88:84:fc:36:1d:98:65:5d:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:6D:A4:11:63:E8:CE:89:3E:E9:12:8F:99:E8:ED:AE:27:9E:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a7:b4:88:66:92:b8:79:40:62:66:b8:cc:6b:15:d4:ab:a9:
bc:59:3b:2e:d9:86:73:6e:bf:59:de:05:de:46:16:75:a7:65:
a2:34:68:d3:c6:a7:e7:ed:81:53:ba:8f:f0:52:8d:2b:22:ea:
7a:f7:81:23:58:3c:6a:fb:a5:5d:7c:e5:90:a8:38:b8:a3:61:
38:69:c6:25:c3:51:76:4c:8b:6d:43:d3:44:f1:9d:88:19:ca:
62:de:06:ba:f7:35:fd:6e:02:6c:0c:0b:e9:f6:aa:f9:16:94:
cc:2b:9a:9f:59:d1:a7:e6:08:79:ad:eb:1e:45:ed:76:6e:b4:
d5:41:07:63:bd:23:da:59:b5:28:fe:fa:d0:8f:3b:ba:57:9f:
c3:d8:26:4f:ba:0f:d5:05:e6:68:a1:f0:4f:38:bd:d3:e0:5b:
23:78:0a:c2:21:40:c3:91:8b:0f:2b:ad:6b:b5:44:a4:ee:f0:
b1:b8:c6:3c:40:dc:67:17:de:39:5d:7d:ba:11:f8:38:f3:07:
b0:ff:aa:80:ff:d7:75:f3:37:59:8d:70:87:8e:21:4e:8b:5c:
46:59:d7:e1:ea:1e:94:6c:8e:20:13:66:cb:fa:f9:fb:8b:5d:
14:46:55:bc:98:92:e3:40:e2:fa:52:1a:f3:0b:9d:3f:b3:8a:
0a:a7:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:12:26 2026 by rpki-client