
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa
File: 04bc0d16-6259-3e63-bf07-ce76906fc12f.roa (raw, json)
Hash identifier: VmyFfAxErCLk9pBwy/rOYkyskp2BJaz5Azx5WVOONZw=
Subject key identifier: 7E:38:CE:39:B3:F6:FE:FB:01:65:98:16:34:98:69:79:0F:A3:E0:56
Certificate issuer: /CN=b18afa70-561d-4db9-a167-25cd94a409b4
Certificate serial: 010D0C9F4328584F49738475983A4708920F0940
Authority key identifier: 8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 402020
IP address blocks: 2604:22e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:84:75:98:3a:47:08:92:0f:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18afa70-561d-4db9-a167-25cd94a409b4
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=065d9a43-3cd7-4c26-99b3-46843eeb75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:f6:25:e7:f7:bd:87:5d:85:93:23:d5:bc:
c0:c9:eb:72:44:12:a7:2d:54:af:2b:45:b0:d9:ee:
4d:a5:92:a5:2f:8b:bd:9d:a5:22:ef:84:5f:79:03:
34:ab:9b:93:90:59:d9:cf:af:4a:56:8f:cb:bf:d6:
d8:bf:0e:ec:b3:dc:37:1a:85:a1:a1:ae:8c:2a:c4:
13:ad:c0:ef:0b:c5:54:de:b9:5d:c6:40:23:7b:7d:
37:a0:fa:71:de:95:16:07:30:42:73:39:20:64:52:
75:55:9b:8e:32:c4:d0:55:16:ce:4b:6b:a4:19:5b:
98:79:11:83:cc:b3:fa:0e:7a:a0:cc:67:e9:b5:67:
2b:9c:27:2d:1e:b6:9f:2a:8a:cc:0c:a2:31:3a:e5:
4a:33:9f:c5:7b:43:2f:cf:e8:3e:fd:02:2d:04:8b:
c6:a7:6d:5a:1a:26:3f:7b:c4:4c:b4:67:94:4a:86:
22:5f:30:e1:b5:a2:77:5d:95:c2:0d:53:4c:70:3f:
37:6d:ce:87:89:ec:44:87:08:72:59:3e:19:1c:96:
19:eb:38:9b:ce:ac:b0:24:93:24:7f:ec:f1:7c:0a:
88:7a:8c:5f:f6:21:96:07:14:47:b5:f6:da:37:84:
78:c5:ab:5b:85:90:28:cb:ee:13:30:6f:d3:ad:37:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:CE:39:B3:F6:FE:FB:01:65:98:16:34:98:69:79:0F:A3:E0:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl
X509v3 Authority Key Identifier:
keyid:8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:22e0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:66:d5:04:6f:6e:49:3f:1c:c1:d2:c1:4a:07:79:69:a0:c1:
f5:d6:7f:21:09:ee:e2:1c:e8:36:f5:c2:43:33:73:41:34:59:
9c:ec:f8:57:b7:c7:a8:7b:bf:1e:d2:5d:07:66:64:33:74:d4:
93:47:13:01:8e:18:1e:62:df:86:d2:73:9b:32:04:9d:0b:e0:
0e:d4:1e:60:bd:9a:fd:51:e9:8f:bc:e5:83:13:59:7b:ff:6c:
f1:b8:90:43:59:ab:31:ee:40:ad:a9:2d:09:3d:40:13:2a:28:
a1:e9:36:cd:e8:d4:af:e9:ef:53:a8:fb:c6:ae:f7:ce:cc:be:
e9:a6:35:76:ef:19:33:31:71:31:da:a5:90:bf:f0:68:c8:55:
f3:27:c2:e3:0f:53:b7:ae:a6:2d:ed:25:bd:7f:46:dd:c7:f7:
bf:1a:82:d6:bc:73:16:81:a5:15:72:d2:b8:a3:b1:2b:ed:b6:
58:ef:5b:7a:fb:0d:fa:1d:ad:5a:e0:d9:86:67:bf:1d:a2:88:
00:f7:d9:7d:99:1d:73:fd:e3:27:02:f3:93:c3:02:94:c8:ab:
15:26:49:84:38:2c:00:01:08:70:c8:f2:74:4b:74:f0:52:b0:
ea:f0:b2:88:af:4c:28:12:7a:93:e8:4d:c6:0b:05:ac:b1:b0:
bb:d8:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:33:27 2026 by rpki-client