
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf5b871c-ad98-3045-80be-a1fe8df90ba5.roa
File: cf5b871c-ad98-3045-80be-a1fe8df90ba5.roa (raw, json)
Hash identifier: tkfSt0g+0NYBZcMVuDNVHK/K8vwP5t7RvynKFyXy1C8=
Subject key identifier: A1:4A:F8:08:A4:99:AC:88:F9:FC:0C:DE:A3:3F:5C:91:3E:CE:D7:E3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584DCF5D6315099334AC299C7940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf5b871c-ad98-3045-80be-a1fe8df90ba5.roa
Signing time: Tue 12 May 2026 14:42:04 +0000
ROA not before: Tue 12 May 2026 14:42:04 +0000
ROA not after: Mon 10 Aug 2026 14:42:04 +0000
asID: 396982
IP address blocks: 2600:1902:1f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:5d:63:15:09:93:34:ac:29:9c:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 12 14:42:04 2026 GMT
Not After : Aug 10 14:42:04 2026 GMT
Subject: CN=e1f90a6a-8367-4074-8a2c-241b881d4717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:77:2f:7e:60:53:9e:09:50:54:64:99:b6:
72:0f:a5:b7:6f:f3:2e:b9:c6:2d:14:d8:ca:4b:45:
af:ea:6c:f8:c0:c7:80:10:df:2c:6b:d2:91:de:68:
80:f9:af:03:5b:dc:f7:47:df:bd:cc:0d:30:b3:3a:
64:05:42:49:72:6d:2f:c6:fe:2b:e4:3d:c6:18:4e:
3f:29:f2:e3:5e:cf:08:9e:31:f7:7f:16:15:28:a1:
d2:45:9b:dc:cb:c7:82:f3:7c:11:6b:bc:64:0f:be:
93:42:96:de:ef:22:3b:46:b6:f2:a7:0c:10:9b:20:
f6:66:40:98:a9:e7:31:de:2d:33:4d:95:2a:c8:e4:
4b:64:3d:9e:3c:e0:97:42:5e:f2:28:1e:0e:56:e3:
fa:90:ad:1b:8c:67:34:aa:b5:33:e6:c7:40:a8:d6:
8a:a4:b7:cd:e8:3b:8f:a7:8d:c3:94:04:36:0e:bf:
14:46:e3:96:14:fb:de:b6:31:e3:88:4a:d1:f8:39:
b1:8a:d4:ee:71:62:05:08:c5:ac:eb:af:a2:01:df:
26:c8:2e:79:05:74:20:3f:be:ba:1a:9e:81:24:1a:
78:69:04:34:f5:63:7a:c5:0a:b6:8f:0f:b9:9c:1a:
72:00:96:a3:99:69:68:0b:74:4d:f5:81:d4:2b:a9:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:F8:08:A4:99:AC:88:F9:FC:0C:DE:A3:3F:5C:91:3E:CE:D7:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf5b871c-ad98-3045-80be-a1fe8df90ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1902:1f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:16:3c:86:ee:95:06:34:c0:49:16:64:5e:c2:a0:4d:ee:3a:
52:cd:37:09:17:bd:81:14:48:da:7b:74:68:51:cc:92:36:b0:
2d:61:10:a7:2e:b2:61:f3:2a:b0:72:cd:a6:35:bb:b0:0b:57:
5b:88:cf:36:c8:82:b1:f1:e0:b6:d6:c7:a8:c7:36:14:d0:8d:
e0:0e:ca:85:57:fb:f1:f9:de:bb:37:08:d6:7f:55:ea:b2:0a:
d9:57:87:ed:f4:48:ad:f2:88:ca:83:91:07:53:3b:f3:05:4d:
c0:4b:09:5d:e7:86:f8:30:b0:2b:02:4a:4b:03:f9:6c:ad:03:
25:31:01:55:bf:c4:c2:7b:d0:aa:dd:4b:61:53:cf:b5:7e:af:
da:f5:58:4b:c5:89:65:05:77:a1:4e:8a:02:6b:18:11:e0:35:
2a:72:76:08:51:3f:4f:08:7f:e1:f0:4b:b0:88:b3:5d:7f:d6:
14:47:87:89:e5:bc:e6:d6:84:c6:b0:72:07:74:f5:f9:49:bf:
b5:6f:9a:b8:1d:bd:3b:24:32:81:bb:86:f2:41:06:4f:f7:d4:
d5:ce:a6:9f:b4:9d:b0:78:e3:fa:c8:03:4a:3b:21:0d:da:a6:
e1:ea:dd:7d:ec:a2:ce:2d:93:19:58:d7:8e:1d:08:74:65:6f:
1f:b4:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:23 2026 by rpki-client