
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
File: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json)
Hash identifier: Z/m1m9fDFid8CHH7WEdHNgfJfYDKaAgd8uZhbvkp7vY=
Subject key identifier: D6:97:19:27:37:68:CD:98:7A:61:28:8B:36:0A:74:A8:B9:7E:51:A2
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F4328584E885A47F5469D77F699618B88
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
Signing time: Fri 17 Jul 2026 21:00:12 +0000
ROA not before: Fri 17 Jul 2026 21:00:12 +0000
ROA not after: Thu 15 Oct 2026 21:00:12 +0000
asID: 33039
IP address blocks: 2602:f95c:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:88:5a:47:f5:46:9d:77:f6:99:61:8b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jul 17 21:00:12 2026 GMT
Not After : Oct 15 21:00:12 2026 GMT
Subject: CN=cad694a3-692e-4264-969e-86f38c111fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:73:56:71:f0:fc:39:a5:06:e5:ba:87:7e:
ab:76:c3:65:08:4e:60:51:f5:b1:b2:16:4a:78:21:
8c:43:c0:a2:11:b0:5a:b7:2f:83:1e:d1:e7:a7:8d:
ad:f5:ec:27:35:f1:06:31:22:be:eb:0c:7b:9b:4a:
4f:e7:21:86:1c:73:74:24:94:de:bc:24:56:9e:ca:
a6:ee:76:5f:fd:11:0f:63:8f:ea:5c:fd:27:57:b4:
b1:a4:0c:88:34:c7:15:32:9e:26:a4:17:c6:63:ac:
f8:54:b8:b8:2b:76:d5:fc:1e:c4:4c:33:f8:ac:35:
ca:fc:70:d1:d8:0c:4e:9c:d8:4c:eb:59:76:41:87:
bb:c9:7b:e8:ca:ab:80:c8:f7:9d:a2:89:2d:12:bc:
ff:37:8a:a9:55:e9:d2:ee:6d:76:ba:e1:b8:5f:a6:
d8:5d:3d:ed:2e:39:d3:c3:dc:80:df:b4:62:8c:ac:
c8:6c:7e:b1:e0:54:05:21:e4:97:71:fd:2a:78:ab:
51:aa:fa:46:e1:48:5a:e5:9e:c3:02:03:86:3c:04:
fd:90:50:02:6b:90:cc:74:d5:8f:82:6a:7a:95:ca:
d8:48:7d:47:77:27:64:92:e9:c6:fb:1c:75:cc:5c:
10:a4:fc:67:d4:6d:10:d4:66:85:b1:46:e7:d9:c6:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:19:27:37:68:CD:98:7A:61:28:8B:36:0A:74:A8:B9:7E:51:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f95c:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:99:69:17:75:de:37:76:54:8f:b7:16:ba:0b:f6:8e:0e:02:
2d:80:be:0a:73:89:12:b6:73:f3:38:87:32:5f:57:ec:7e:32:
1b:81:02:49:6e:5b:f2:a5:85:74:61:e1:5c:6b:bf:10:26:62:
e2:58:a0:44:74:97:7a:9b:41:71:de:04:75:2c:9c:eb:c6:9b:
31:bb:d5:cf:50:ee:62:6d:12:1e:2d:6e:e5:71:8f:59:f2:84:
a9:b1:4b:a4:2b:87:a9:41:1e:b7:82:d7:98:e6:3d:88:bd:25:
3f:a6:80:55:f6:67:f1:35:98:aa:54:a5:ec:3a:45:e1:70:b0:
e4:f7:f1:0b:c2:30:02:b4:b0:b6:93:7d:c5:f3:80:a8:4a:0c:
26:d9:f6:36:d9:e7:fd:6d:c1:d7:c1:63:69:14:38:dc:2c:11:
2d:fa:d4:2f:d7:04:f6:35:ad:e0:1d:de:5c:f5:d9:3e:27:de:
47:2d:a6:43:ee:8f:4f:9d:ea:4a:4b:c6:b7:d9:0d:c7:6b:54:
14:ad:8e:ef:a5:59:c9:04:4e:a3:b6:12:ea:11:38:31:ac:13:
15:1e:f2:b0:74:df:32:6b:12:9d:4d:81:a0:37:5d:7a:df:f1:
71:e7:ae:8f:90:27:1b:44:45:c8:9a:a1:7d:66:a4:33:5e:0a:
05:74:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:26 2026 by rpki-client