
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa
File: efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa (raw, json)
Hash identifier: kxpwhrHnUhleczC/ao81+CzTKFY6o8tkgObAHAHsEnc=
Subject key identifier: F9:40:38:D1:DA:DA:91:09:18:55:A1:57:64:3E:75:04:95:94:D3:7B
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584F4974B59126049C3718FE0900
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22359
IP address blocks: 2607:8240:ff2a::/48 maxlen: 56
2607:8240:ff2b::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:b5:91:26:04:9c:37:18:fe:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a46d0e4c-3df2-438a-82d1-187ac32a573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:2d:65:d5:1e:e4:40:e7:41:99:74:c5:9b:
1b:5d:d5:c4:73:e0:13:85:ab:7a:5e:3d:6a:ed:0c:
07:b6:b9:4d:9d:f9:6a:4c:ce:95:92:cd:63:06:ca:
1a:f3:a7:fa:ba:bc:c0:4b:c0:c3:f9:16:f5:94:10:
92:1b:ff:ae:68:d5:f8:4c:06:ba:35:5f:dc:e3:ed:
75:1b:ad:7a:ee:18:d7:9a:aa:69:43:5b:49:bf:85:
0b:3e:7e:c9:00:03:14:0d:bb:4e:65:e7:58:bd:2a:
fa:2b:ff:ba:72:6f:aa:ab:8c:fa:71:0e:f6:9a:bd:
1c:6f:4e:78:a7:ea:e9:04:03:a4:62:a7:47:c0:24:
06:29:ec:c8:bf:a0:9a:93:2f:47:79:e4:55:78:10:
81:2c:7b:d4:2d:43:78:93:8a:f0:c1:1b:ad:4f:4c:
7f:ef:45:a1:10:a8:60:8c:27:38:96:46:15:19:be:
92:c4:02:96:22:ca:c5:3f:68:58:50:72:3e:24:a2:
b5:ff:84:81:4b:97:05:49:0e:a5:69:0b:ad:a8:b2:
72:bc:6b:33:e0:91:f1:08:57:36:8a:0f:0b:89:f1:
e2:a2:87:0e:9f:bc:fe:31:76:4e:0c:42:ab:0c:eb:
c2:cf:d3:e1:9b:41:c9:33:74:33:5d:3b:52:d8:e8:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:38:D1:DA:DA:91:09:18:55:A1:57:64:3E:75:04:95:94:D3:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8240:ff2a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:1b:b1:77:03:8b:c4:9f:97:2a:bd:0c:cb:9b:04:34:e7:82:
01:55:d4:4f:cc:1c:47:fc:09:86:dd:9f:15:37:46:ec:f6:c6:
53:ce:d0:65:13:a6:2c:13:c4:91:9f:58:af:2a:bf:4c:39:54:
fa:8f:96:43:0e:23:0c:e4:e7:d3:ec:d1:11:69:b4:6f:9b:09:
d7:75:2e:e6:81:22:68:19:3e:ca:5c:ed:a8:20:e4:a4:2f:c3:
36:ce:ef:97:f5:84:54:ff:20:7a:d6:c0:c4:2e:39:fd:ac:0d:
4b:90:08:ba:0e:b1:31:bf:63:f7:9a:a3:c7:c7:9d:09:45:91:
3b:24:95:a5:9e:56:03:fc:84:46:e6:2a:64:19:18:4c:ba:38:
ba:54:62:a3:45:a5:ea:3c:99:86:b8:73:07:68:d5:cf:2a:4a:
49:4e:0b:36:f5:d4:eb:c8:5d:3e:24:8f:e6:31:56:ac:90:38:
67:98:ee:cd:af:50:74:31:d8:1d:86:2b:7a:f5:be:47:bf:b0:
77:78:51:58:fc:01:16:8e:be:18:cd:d4:5c:ef:44:fa:16:1a:
63:6d:02:97:2e:36:0c:5a:ef:53:80:74:bc:3a:9f:55:f2:ec:
b8:d0:6a:5f:f7:d0:0f:21:24:f8:3d:23:08:99:3a:27:66:24:
fd:7c:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:14 2026 by rpki-client