
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa
File: cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa (raw, json)
Hash identifier: szgdSQ+9NPnJ2GXxSkvvP4NgLN8kNhj1iUQoYVKebYw=
Subject key identifier: 46:D1:0A:7C:60:71:C8:5D:13:5F:9F:B9:28:75:67:7B:37:32:E1:83
Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial: 010D0C9F4328584F497553C1300AD5E1087D8D20
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 2610:e8:3180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:53:c1:30:0a:d5:e1:08:7d:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ef1b3826-3772-4954-99d6-9dbf4e07034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:be:26:71:63:4d:a2:d6:c3:a7:fa:97:e4:
0c:d3:d3:ff:93:0f:71:f0:3c:10:cd:a6:fc:71:65:
e9:a6:71:7e:0d:9b:7e:ac:5c:23:b3:fb:3b:35:9c:
bc:09:51:c0:58:17:b7:1d:8a:cd:ed:10:4b:68:38:
27:ae:ed:4c:4c:85:17:2c:8e:b9:4f:61:26:66:2a:
94:bc:1a:2c:dd:f2:7c:8b:72:ef:6f:12:df:ba:a8:
77:57:0c:3b:2b:61:2a:5c:aa:b2:eb:78:cd:51:49:
b7:c0:69:52:47:ae:53:82:2a:3a:a8:11:ed:1f:08:
d9:75:32:55:07:bf:38:64:bd:1d:e4:c9:b1:2a:a3:
aa:04:93:7f:69:65:a0:9c:16:14:9f:63:8c:d5:13:
49:31:22:8a:a6:b1:cb:ee:a7:00:1b:33:64:67:74:
26:6c:99:c9:c7:f4:e6:13:75:7d:d7:89:78:b8:d1:
fc:ef:f4:b5:6c:00:88:f6:f9:dd:e6:2e:46:f3:cc:
09:b1:74:8e:fd:63:21:d9:53:47:61:53:28:70:cb:
d4:bc:4c:b0:e6:91:38:dc:e8:fa:19:89:c2:7f:d3:
34:eb:ba:15:3d:e6:95:51:c7:2f:cd:6f:73:9f:56:
b4:d3:19:14:a6:90:e3:3a:f8:7d:50:98:a1:78:18:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:0A:7C:60:71:C8:5D:13:5F:9F:B9:28:75:67:7B:37:32:E1:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
X509v3 Authority Key Identifier:
keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:e8:3180::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:8c:eb:4c:43:18:fc:3c:10:32:ad:64:8d:98:f1:2e:46:df:
50:55:0d:ce:85:08:ef:dc:23:9c:bb:9d:4a:f2:df:89:b1:f6:
99:db:99:26:65:c5:61:95:cb:7d:ce:9a:1d:ff:83:71:b9:c8:
3b:05:11:f3:e0:f2:43:f1:42:6f:03:7e:ae:7b:2c:f4:c8:e9:
2f:1f:4f:85:af:18:70:70:1b:8d:35:7a:fd:dc:18:71:22:65:
0f:f4:87:9b:3b:51:98:fd:51:17:2d:43:f8:f3:ed:2b:a5:2e:
62:00:0e:b7:c0:aa:aa:eb:6f:72:41:a1:2e:ec:d0:f8:26:f7:
52:c3:7b:1e:dc:89:95:14:2e:c2:74:f0:5d:e1:d3:ff:ea:0c:
10:eb:53:b4:b0:75:4d:8e:90:00:33:ed:76:61:8e:0a:84:37:
fd:66:b5:3a:fc:19:08:72:48:d1:d2:0c:77:00:05:20:7a:2f:
50:dc:e8:6d:60:76:4b:e7:b1:e8:35:ad:70:f5:ba:67:ae:b9:
86:e9:bd:89:c3:9e:5c:fc:90:d2:22:76:9b:ec:73:d3:d0:21:
25:06:96:d0:0c:f3:db:48:d3:3e:13:8d:23:33:b7:b1:ab:60:
b3:06:3f:3d:f1:d7:36:ca:fd:0f:82:6a:22:4d:24:c9:4c:23:
40:c1:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:38:40 2026 by rpki-client