
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa
File: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (raw, json)
Hash identifier: 4Q5dJDhqVgPj8wTsNh2tbdxrCwByXYe+TuQUqZH/ddY=
Subject key identifier: 17:B6:75:20:0C:4D:26:F5:7F:0B:F3:77:2F:2B:E6:35:77:79:53:D6
Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1
Certificate serial: 010D0C9F4328584E7E94EF4910A4AA6BCFED07A0
Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 22251
IP address blocks: 2604:5ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:ef:49:10:a4:aa:6b:cf:ed:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=aee65c4d-fb3f-480c-84f3-98f2a88c5601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:2d:7c:ec:0e:b2:ba:51:f8:2c:41:23:56:
4f:18:6a:9a:ef:e2:8e:33:c4:48:ec:d3:72:85:d1:
6e:47:69:e2:fe:96:80:f5:a8:e0:af:85:23:98:06:
1e:b8:52:e8:8a:d0:31:f6:33:0e:02:06:66:ef:b7:
f7:f1:7f:63:f3:27:b4:5b:9a:8f:68:b0:4b:d3:1a:
b2:92:00:c7:81:f4:74:82:5f:8a:ec:60:6a:9d:23:
f8:f1:2f:a8:a6:24:d4:fa:94:ef:46:66:71:b0:a2:
53:b8:23:36:fa:bd:30:7b:64:57:f5:7e:15:17:f1:
5c:ac:24:29:95:f9:16:e4:af:a2:31:63:32:8c:76:
5d:52:a4:7d:4b:a9:c1:69:00:b1:07:db:69:93:70:
ef:a3:76:41:05:c5:02:e3:ce:82:9a:df:2d:4b:49:
c8:4e:3f:b2:76:8b:b3:b9:05:44:54:b2:dd:99:1f:
27:12:8f:93:09:8e:bd:6d:02:d4:32:f3:b3:0d:d3:
56:18:68:af:25:e3:00:03:41:88:9e:98:4f:a2:a4:
38:5c:2a:e0:0d:1e:87:82:fe:c6:c4:cf:f0:3c:cf:
46:ce:71:c1:69:23:c6:43:d6:7f:c2:4d:b5:f5:41:
21:0c:b9:98:dc:51:db:fb:4e:67:7b:21:73:f8:e8:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:75:20:0C:4D:26:F5:7F:0B:F3:77:2F:2B:E6:35:77:79:53:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl
X509v3 Authority Key Identifier:
keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5ac0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7e:6f:a2:fb:5d:49:cb:ff:0e:8f:b3:d6:7e:d4:b5:e5:18:
2f:69:3d:6d:06:5f:58:b4:17:2b:a3:2c:92:1f:dd:ef:4f:72:
dc:ef:00:23:20:61:85:39:22:6b:71:9d:b9:9b:e7:c1:1d:98:
19:2c:59:b9:11:fc:db:50:bd:6b:94:ee:ab:82:5f:59:59:67:
bc:e6:8e:36:e6:2d:00:73:fe:30:1c:3b:34:8d:58:b4:cf:8e:
c4:1c:ad:66:61:d9:73:29:20:1c:b3:90:f7:47:c1:ed:f5:fa:
6d:b9:52:7a:e6:f6:33:26:0b:e2:7d:b8:8f:d7:76:7a:f2:f1:
ae:ab:b3:c0:d5:74:7a:ab:95:7f:d2:9b:b0:b5:ee:d3:00:a7:
83:f5:26:d0:20:de:08:c5:4a:46:ca:b2:0e:d9:f8:a0:17:9d:
c4:81:f1:8b:fa:88:92:8a:c9:6c:15:f1:66:7d:a1:81:ce:ab:
7a:8b:61:ab:95:c7:61:76:5f:64:d5:28:61:f3:64:87:84:84:
35:f4:12:e8:08:85:db:0f:3d:f4:b6:95:fe:01:85:8a:58:9b:
2e:7e:f4:7a:f5:de:94:2f:a7:c1:4d:7b:fa:b3:ac:43:ad:e8:
34:8b:1f:9f:b5:51:da:e5:38:ec:45:16:78:ad:bc:58:3c:ef:
12:10:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:31 2026 by rpki-client