
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
File: 3d1824af-5e0a-30b8-9547-2f81c0164b04.roa (raw, json)
Hash identifier: Ce1zqmK7hgeW2BJfcfLJGxc8uOBT0LWylnnLfEpB/uY=
Subject key identifier: 0F:58:6F:7D:0B:FD:6A:6B:07:15:47:90:07:B3:E8:34:50:D5:09:F2
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584E8B24F5DF37BC7FA146921800
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
Signing time: Sat 18 Jul 2026 21:00:11 +0000
ROA not before: Sat 18 Jul 2026 21:00:11 +0000
ROA not after: Fri 16 Oct 2026 21:00:11 +0000
asID: 393885
IP address blocks: 2604:4a00:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8b:24:f5:df:37:bc:7f:a1:46:92:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jul 18 21:00:11 2026 GMT
Not After : Oct 16 21:00:11 2026 GMT
Subject: CN=12e54894-dc9c-4809-9bd9-a10d63c06ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:6e:a1:89:2f:1c:d3:c5:81:06:e5:d7:ac:
8b:e1:18:27:88:c1:cc:3b:24:bb:2e:50:48:a3:69:
90:c9:af:0d:b1:84:5b:ec:56:34:43:0b:8c:41:88:
c1:b3:2b:e7:17:09:2c:c1:bf:51:6c:bf:aa:45:57:
12:d9:cb:7f:0a:65:2e:47:96:e0:1a:5c:a1:4d:8c:
da:a8:95:22:54:31:33:48:0a:af:85:91:17:31:ad:
d6:c3:a2:68:ba:08:b3:c9:bd:b2:91:4d:23:e9:62:
8c:c5:3c:f4:cf:86:57:03:c2:93:1c:b3:82:10:67:
43:3b:ab:14:54:25:62:5f:89:45:2d:52:fc:3a:b8:
74:f8:78:48:2b:3f:eb:3d:7b:aa:5c:dd:10:bb:79:
fa:0f:3c:a7:14:35:47:4c:e5:a7:97:ee:6c:57:c7:
84:00:0b:c5:12:72:c4:24:8f:36:54:22:59:b2:9f:
aa:2d:da:4e:70:97:e3:ae:27:e2:89:63:14:dc:c9:
13:1c:72:c9:a2:36:46:05:e1:d2:87:69:5b:a8:2a:
6a:59:09:25:c1:d9:ca:e0:af:43:06:01:b0:c2:20:
8b:b2:0a:84:4f:47:c2:b1:bf:f9:71:9f:a3:75:16:
50:c4:84:96:4e:e0:13:d1:ec:34:9c:77:a7:f9:db:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:6F:7D:0B:FD:6A:6B:07:15:47:90:07:B3:E8:34:50:D5:09:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:c000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:0f:9e:d0:32:16:31:8d:5f:6f:ae:6b:20:bd:c3:fb:e8:67:
25:4d:14:a7:9a:97:2c:2a:fa:ac:6e:60:93:40:e2:31:64:74:
ea:6e:cf:70:6b:16:99:f5:7a:5e:c8:9a:6a:59:a3:5d:89:f6:
d8:f3:7f:45:fe:87:77:a3:42:78:bf:95:30:f5:15:6e:0a:b6:
8b:ed:27:25:a2:47:b4:a6:43:dc:de:2a:77:5f:23:7a:92:cf:
30:fa:31:a5:27:d3:20:19:67:11:0f:3a:a4:1e:76:bb:e2:b9:
22:c5:22:a7:67:4d:ce:42:74:f1:85:10:1a:10:ac:9b:13:16:
4e:d0:63:06:75:b8:b8:0e:6e:3e:43:6c:cf:38:c5:21:44:bd:
f0:e2:b1:4c:fb:9f:1f:a0:d1:6c:4d:1c:a1:a3:76:c9:10:a9:
43:f1:53:cb:55:93:c2:1b:23:8a:99:85:a0:ba:70:fe:e5:0d:
8a:62:62:bd:24:e2:bd:2a:39:d4:90:5e:b0:bc:d3:19:00:44:
63:4e:3d:95:82:63:52:6a:44:40:49:7c:4f:48:a5:2c:31:b8:
72:66:f9:5e:be:52:1d:0d:62:93:3f:f3:12:5b:75:46:47:fa:
76:8e:f3:e3:bd:9e:9e:e9:13:25:cc:a9:b1:2f:48:4e:9f:49:
00:15:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:45 2026 by rpki-client