
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa
File: bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa (raw, json)
Hash identifier: b7LGQbcKW6bjb6BUJrW8hJLvXLG3tvs0plj1HYtnhbo=
Subject key identifier: 0F:48:8B:FA:0A:3A:A7:78:CC:4C:A6:78:9F:1C:68:85:33:BF:98:8C
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584F4C3D767EBB8E43D5BFF30780
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 16509
IP address blocks: 2620:147:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:76:7e:bb:8e:43:d5:bf:f3:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=93dbc2f4-2203-4040-a08a-288dbfbe66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:dd:d1:c2:b2:35:88:ee:43:a8:28:3b:6c:
6b:aa:68:ff:d8:d6:17:1d:30:7e:59:4c:b1:a8:7d:
83:3d:1f:0f:02:81:c9:03:cf:94:75:a2:5a:c1:c3:
f6:85:db:ad:c5:b5:c5:08:a9:30:91:bf:fc:7a:a6:
f9:04:db:05:49:4f:02:ec:c7:d4:d6:a2:d8:c1:21:
ae:ff:d9:41:e4:fa:ac:ca:c1:0d:e8:86:77:29:82:
9e:ac:94:09:e6:df:5f:d4:d9:b9:62:5d:64:ce:59:
52:51:86:fe:75:62:67:25:dd:c8:b4:32:cd:03:86:
b4:aa:e2:2f:fb:e3:09:e2:5a:9d:3b:ee:8d:4f:8e:
1b:93:c2:eb:b8:52:bc:f6:e9:82:20:5d:ad:63:15:
6f:d8:f5:5d:d4:e1:12:2a:9b:eb:f4:8b:7a:91:47:
14:e8:d9:de:fc:b4:6d:e3:1e:9b:b5:39:35:ec:bf:
82:d6:dd:ea:94:be:76:3a:42:9f:1e:76:2d:ec:d7:
c2:75:0a:c9:08:b5:10:c9:3c:48:0b:98:12:8b:98:
c6:ba:c9:a0:f8:01:14:63:ae:03:4d:ae:52:28:f1:
a4:94:48:a4:2a:3c:8e:88:84:b4:42:98:46:31:37:
4f:73:e7:f5:7e:86:36:9b:40:3a:41:33:9a:04:90:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:8B:FA:0A:3A:A7:78:CC:4C:A6:78:9F:1C:68:85:33:BF:98:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3d:94:5c:2d:91:3c:72:62:bb:a3:27:61:b0:dd:b5:44:91:
16:ab:04:5d:6c:9d:f2:0a:dc:e4:49:53:e3:48:ad:28:09:54:
bb:86:5e:60:51:1c:a7:da:09:37:cf:ed:0c:e0:a8:3b:22:e8:
9e:7c:e4:39:9f:91:9c:8d:6d:c9:c1:75:8d:d4:2d:e5:1c:46:
ef:c8:84:5e:62:3b:97:ea:6b:7a:b8:09:6b:43:40:92:65:78:
c7:6f:4c:60:51:7b:1c:fa:9e:28:ae:b2:94:35:b1:94:2a:09:
5a:2e:16:19:38:1a:f7:18:70:ca:d7:5a:46:4a:27:39:e3:ba:
30:2d:da:15:51:b0:33:38:28:84:9b:6d:37:56:94:58:81:89:
9e:69:f5:ad:fb:d0:4d:aa:14:9f:01:04:0e:a9:cf:63:df:36:
0a:ff:bc:78:5a:ae:8c:34:05:31:14:cb:78:d9:d6:f6:96:9e:
b3:f4:da:f8:2e:a2:62:85:67:19:b1:9e:bf:f6:b1:87:3c:5d:
60:92:fe:6c:be:c3:41:17:e8:a7:df:4c:90:3d:0b:d5:2a:77:
6b:02:f9:c7:05:e3:58:a9:39:49:a6:e4:17:75:f1:f3:b9:3f:
72:e5:92:2f:c4:ca:7f:92:0b:ad:a7:00:b1:d4:49:c3:55:39:
d3:0b:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:59:07 2026 by rpki-client