
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa
File: cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa (raw, json)
Hash identifier: IAJLFxFNhlQBqOlv1B/20ccM7dchWzjOoMPciRNFDLY=
Subject key identifier: 96:6E:1D:2A:CA:DD:EE:A0:81:82:37:A3:4F:A2:12:EC:7E:4A:6B:99
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E5A4A1F52ABE849706B949C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 203898
IP address blocks: 2606:54c1:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:1f:52:ab:e8:49:70:6b:94:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=bdac0c95-1c2d-4305-bdcf-b4cf821877bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:77:4f:86:1c:98:a1:c1:b5:c4:c8:25:51:
19:88:33:0b:4e:36:8b:b3:b0:65:e9:35:10:1d:34:
b1:51:19:e5:60:70:28:77:e6:6e:ad:56:92:4e:6a:
9c:7a:5b:f5:06:9f:75:a7:01:24:0a:c5:62:26:81:
bd:32:8b:2d:d0:99:48:d6:a2:aa:41:47:1d:c6:af:
bc:e4:d6:fa:5b:15:35:5a:75:b4:d7:46:43:42:24:
62:e1:bb:a2:bd:4c:0c:56:2c:2c:32:b3:f4:ae:41:
41:eb:2e:a7:95:36:0a:b9:59:11:53:e3:23:fb:ff:
5a:8b:d2:9d:f0:40:50:a0:ce:a5:9c:f7:8f:e2:0e:
fd:6b:ae:4f:8f:d1:93:73:8b:4b:6c:f9:f4:56:83:
c5:a2:9f:64:17:ab:ce:86:50:ca:07:4d:c3:22:a4:
0e:9d:e8:99:50:93:b1:4b:58:23:27:76:fc:cc:9b:
62:8b:2d:2a:fc:e9:85:27:96:93:3d:32:76:df:34:
79:46:55:b2:b0:9f:91:30:43:4c:b7:f5:99:70:3b:
8c:0c:6c:c4:56:a3:4c:4f:f2:1a:24:83:f8:19:c6:
25:8e:26:35:45:07:23:73:ca:b6:2b:f3:35:17:15:
e2:da:08:8f:a9:ea:a1:39:88:d1:41:ab:60:ad:cc:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:1D:2A:CA:DD:EE:A0:81:82:37:A3:4F:A2:12:EC:7E:4A:6B:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:54c1:c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:06:7b:f8:ee:58:0a:6d:80:1e:52:bd:03:a9:19:bb:40:d5:
53:b8:c9:97:96:3e:fb:d0:1e:78:26:52:9c:4d:73:2d:03:5e:
1c:db:6e:65:af:d2:f5:78:33:20:e7:f4:9b:53:ff:f7:97:a3:
c7:c0:ea:c6:3e:df:df:29:7f:2c:2c:d1:2d:6d:8a:48:81:09:
b8:0f:bd:b0:6e:62:91:4c:1c:68:dc:b8:27:25:7c:e4:7d:9a:
9e:eb:5f:a5:84:02:4e:9e:43:67:a8:e0:a5:1f:51:32:62:a3:
d5:55:bd:d0:3d:59:74:72:28:9a:30:4c:2d:00:6e:05:19:d0:
de:ba:63:59:1c:19:22:b6:47:a2:5f:d9:89:c7:f1:3d:f4:60:
40:5c:5b:18:74:0f:60:a1:64:56:6d:76:ce:85:ee:d6:61:c2:
1a:1a:be:28:4f:13:47:62:51:8e:f6:d6:ac:45:1b:ce:90:35:
c0:de:50:1f:8c:eb:af:2f:3c:67:c3:af:81:af:fe:09:bc:c6:
e8:6e:b6:da:9f:98:96:b4:0d:b4:4b:de:7e:c7:f2:86:7a:7d:
d9:c4:39:73:d2:11:6b:6e:7c:e4:2c:a9:78:63:b7:cb:95:52:
7e:66:96:4f:df:6e:26:00:b4:df:5a:de:b3:7e:67:14:16:80:
ac:e4:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:16 2026 by rpki-client