
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
File: b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json)
Hash identifier: eHAILUjaT4uDn+D3G8C2o8049cWBR6ISsA+qsiyOwLM=
Subject key identifier: E9:41:6A:C0:EE:6B:81:98:4B:BB:A4:24:90:31:F6:23:4E:4D:83:EE
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F4328584F9A687E9C3FADFF5B4C7E24C0
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
Signing time: Sat 24 Oct 2026 01:00:12 +0000
ROA not before: Sat 24 Oct 2026 01:00:12 +0000
ROA not after: Fri 22 Jan 2027 02:00:12 +0000
asID: 16509
IP address blocks: 2607:d540:fc0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9a:68:7e:9c:3f:ad:ff:5b:4c:7e:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Oct 24 01:00:12 2026 GMT
Not After : Jan 22 02:00:12 2027 GMT
Subject: CN=b11956aa-8a64-49ef-b89b-471b873bdf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:59:60:a9:79:22:57:97:d2:de:c7:f5:32:
c3:be:a1:30:9c:0f:60:a4:82:1d:80:8d:d2:7f:9f:
0d:bc:d4:a8:cb:eb:9d:d2:93:a5:74:f8:0d:4e:1b:
ab:c2:30:fb:1c:cb:f2:d4:91:69:01:04:eb:2b:d3:
a0:9f:ca:a9:0b:b4:92:4b:94:49:a9:ef:e0:c7:9d:
a3:33:cb:fd:c8:cd:7e:9c:33:47:3d:c1:53:c7:36:
d3:1e:5e:59:51:60:2d:3c:6d:dc:76:f8:68:4c:56:
da:0d:69:92:e2:55:96:16:9b:21:fa:fd:80:19:0f:
fd:2d:2d:97:1c:6b:37:8d:7a:4d:b1:b9:3e:bb:67:
a7:c6:70:dc:af:25:a1:42:69:9f:53:d4:26:f0:cc:
cf:55:92:76:f0:8e:2f:90:ef:67:04:87:7b:1c:0d:
ff:d3:cb:1c:e8:fd:fc:a1:16:d8:f2:33:68:6d:27:
8a:7f:10:c0:2e:ae:05:85:69:73:d8:c0:18:08:18:
28:68:c3:54:3e:57:d5:92:5f:80:62:e5:1a:72:ea:
0c:9a:ef:1d:a2:1e:6e:2f:35:0d:4d:80:3c:8b:a0:
49:a8:25:d2:fe:42:b5:c4:10:35:ed:7c:fc:25:0a:
e5:9d:51:ea:18:51:15:b2:4f:86:6d:3a:75:fe:35:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:6A:C0:EE:6B:81:98:4B:BB:A4:24:90:31:F6:23:4E:4D:83:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540:fc0::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:07:82:b8:5c:dc:55:c2:12:eb:c4:f5:13:d4:ef:90:e3:79:
30:98:42:75:93:fa:b7:54:a9:df:f3:33:82:fe:31:d7:55:be:
93:d7:db:de:79:53:96:f0:ab:66:53:96:5c:c3:a3:97:8c:b2:
14:06:6c:c8:48:85:39:a5:61:14:6e:c7:e0:dd:a2:29:b8:6a:
0d:34:f5:a6:15:cd:3c:f5:0f:03:e5:c4:18:99:4b:8e:6a:77:
dc:a2:f1:a6:e0:8f:c6:06:26:66:c2:0a:5a:57:32:7c:6f:8c:
cb:ea:69:46:d3:45:f9:1d:c2:ec:d9:74:ed:7b:ca:1a:ff:3d:
22:b5:9c:e5:b6:36:7d:44:83:ab:82:ae:77:9f:f0:c2:71:44:
a1:9f:4d:31:b8:de:b3:78:36:36:2f:af:3e:5f:a5:8c:0f:f3:
3b:91:6e:82:8e:57:1a:7a:53:8e:48:8e:41:30:79:d2:42:ce:
9a:a9:f5:dc:34:07:b8:de:d7:6a:39:69:53:b5:70:25:a6:ed:
9a:ec:84:19:a7:54:5b:f2:18:a7:0b:29:be:2e:7e:aa:80:9d:
94:47:6c:a9:15:70:ff:35:42:8f:1a:0e:cb:61:58:fe:af:5e:
cc:65:97:47:e1:7c:1e:90:88:ee:7c:13:69:65:cc:df:48:85:
f2:49:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:04 2026 by rpki-client