
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa
File: 1aa1c3e9-41e8-3676-849a-c74654b10751.roa (raw, json)
Hash identifier: Tr1Zcvhf+eVvD48gvVMPZ2qIC3mjbxx3wG8eXso8VKI=
Subject key identifier: AD:88:FC:72:A0:F1:55:40:51:ED:8D:AB:B4:41:BC:52:89:45:3A:57
Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial: 010D0C9F4328584F480D3FB78F39AF8DB103C380
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa
Signing time: Thu 24 Sep 2026 13:00:12 +0000
ROA not before: Thu 24 Sep 2026 13:00:12 +0000
ROA not after: Wed 23 Dec 2026 14:00:12 +0000
asID: 25664
IP address blocks: 2607:cc80:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:48:0d:3f:b7:8f:39:af:8d:b1:03:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Validity
Not Before: Sep 24 13:00:12 2026 GMT
Not After : Dec 23 14:00:12 2026 GMT
Subject: CN=7dd9d96f-41ea-478a-8fb4-4176127328a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:f7:24:f8:d0:3c:99:24:1f:5b:d9:7f:78:
38:d1:88:25:c8:2e:64:ff:33:77:b2:3e:0e:e6:d8:
68:35:85:91:9c:f0:9c:03:6c:9c:da:26:1a:18:92:
bc:cf:af:b4:48:8b:28:8e:f3:66:2c:03:16:5d:00:
2a:4f:72:bf:e9:80:20:87:ee:10:73:bb:a8:92:56:
bc:67:7b:a8:c9:66:5e:01:a1:14:af:5f:d7:e6:99:
95:eb:c5:bf:62:d6:2c:de:25:67:e1:e4:be:60:83:
df:93:94:6e:37:f5:dd:15:02:23:c5:ac:c8:0a:84:
6e:39:47:dd:71:20:f3:86:e3:78:ae:66:ba:1c:c7:
b9:cd:bb:f6:e8:e6:8e:f4:ec:4c:ac:b2:34:1e:27:
ac:cf:01:60:17:40:ee:8d:a0:4b:ab:eb:c0:35:f1:
ce:33:f7:d8:6b:e9:fe:ed:c0:2d:29:2c:75:3c:ea:
8f:72:0b:25:8c:0c:42:b9:9a:42:3d:54:22:21:a0:
dc:5e:66:c9:20:af:32:62:12:3f:81:b8:0f:fd:25:
ee:1e:70:66:66:cf:74:c9:0a:80:88:fa:1c:f3:b1:
ba:7e:17:bf:84:1f:ae:3e:6b:0c:49:17:d3:ff:bf:
d5:4a:43:d8:15:64:f3:c8:d0:db:a4:e4:c3:63:91:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:FC:72:A0:F1:55:40:51:ED:8D:AB:B4:41:BC:52:89:45:3A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
X509v3 Authority Key Identifier:
keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc80:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:32:87:34:d9:32:f6:b6:7d:a3:a4:db:8c:39:2e:db:3f:c2:
c8:54:02:26:80:9c:0d:ed:91:f4:2d:e1:d7:b8:42:c8:cf:ce:
b7:9c:2c:65:b4:17:10:05:ae:57:37:a5:40:4f:c3:c9:a5:f1:
bf:f3:5a:29:e5:9d:4c:23:4b:55:50:d2:a4:9f:99:bd:48:72:
e6:32:50:57:61:1a:97:20:f5:cb:10:18:0f:ba:23:b8:d1:7f:
59:6e:83:f4:4d:ec:ce:1b:7d:60:a3:f9:74:06:0b:c1:07:b3:
96:7f:98:6f:8e:36:ab:44:80:5a:40:ad:03:b5:dc:5b:c4:56:
6e:57:be:b4:56:69:43:5c:1c:94:ab:be:fd:86:65:75:13:8f:
83:9d:e2:f8:24:fd:42:a4:bd:84:ed:8e:e0:38:ae:17:56:c2:
b1:b6:ab:76:ad:27:cc:07:88:bb:e4:34:2f:a9:b5:16:48:8c:
45:74:f2:f0:ab:32:e6:8a:2c:6a:49:c9:11:fa:bc:17:71:65:
20:0f:01:2a:c3:b0:ad:48:7f:5d:12:94:1b:f1:32:69:c2:6e:
4c:61:5b:2d:85:dc:77:bb:52:b0:fe:46:2d:ce:b6:f1:76:6d:
a4:a8:0f:ba:5d:31:2d:3a:a6:2a:18:72:b9:ba:69:b5:e3:0b:
ea:ea:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:58:34 2026 by rpki-client