
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
File: 4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa (raw, json)
Hash identifier: +rfz3KuoiiFxrFKNolXkwhm+FgnGEu+BbRdS/P1QZZE=
Subject key identifier: F5:CF:5F:AF:E1:13:35:2F:E4:FD:8F:A3:C4:35:3A:EC:F7:6C:E0:B3
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584E5A4A00D71D43F9CB216AE700
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 396982
IP address blocks: 2604:b040:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:00:d7:1d:43:f9:cb:21:6a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=17b7a156-fa78-4b9e-83fb-5f32fb3133de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:cc:3f:89:6d:e5:58:df:af:69:ce:22:c7:
1b:7d:de:45:62:e3:92:36:1c:7c:42:82:39:5b:57:
d5:ba:73:fc:92:bc:c5:88:8a:e7:e3:50:62:61:ce:
c7:58:4e:dc:f0:54:a0:73:ac:26:9f:0b:20:e6:81:
ee:c6:b0:67:98:c2:25:77:75:61:48:59:61:f9:b8:
5f:b4:61:49:99:c1:ad:60:e8:16:89:41:cc:25:9e:
43:5b:c6:4a:50:6c:2d:1c:5f:65:10:a2:d4:51:ec:
f7:5f:f9:b8:15:0f:c6:d6:46:bb:fd:02:72:0f:aa:
a0:ea:8b:64:21:5d:1c:31:5f:a5:bc:ac:58:25:d6:
ef:8d:22:5e:9d:ec:36:c9:2d:fe:03:db:b0:7a:89:
e9:cb:fa:2e:d6:87:8b:04:6e:38:05:50:ee:c2:f1:
a9:c1:84:f7:bf:99:8b:5f:d0:52:a9:ab:79:ee:b7:
fb:53:cd:38:27:4c:89:72:92:50:76:6d:4e:f0:34:
39:a3:86:a4:ef:2b:52:01:73:91:11:e2:67:09:27:
0a:d5:35:3a:e9:d7:04:c5:72:bc:11:9f:77:7c:9e:
11:e7:99:c8:73:03:48:26:b2:46:5b:48:01:08:89:
b7:56:c5:fa:94:62:af:cd:d0:14:d2:8e:b0:b7:cb:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:5F:AF:E1:13:35:2F:E4:FD:8F:A3:C4:35:3A:EC:F7:6C:E0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:b040:13::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:28:b4:07:88:8a:c8:96:ba:29:5b:37:06:18:59:99:80:9c:
40:81:f7:6a:fa:5b:11:0a:f8:7d:e4:3f:1b:a6:61:d1:97:70:
58:9f:56:b5:48:9a:e1:fc:34:8d:64:1f:cb:5f:50:a2:c4:6f:
6e:50:43:60:c1:e4:b8:4e:b6:a3:16:9b:c5:ab:5e:b9:2a:00:
19:77:3f:d5:61:70:51:cf:35:cd:41:60:0e:43:d3:7c:4c:19:
75:68:f6:88:6f:4f:98:f8:98:80:5e:23:9c:f0:e4:bc:c4:9c:
e2:d1:3b:4c:aa:ed:4e:62:45:47:b9:1c:d3:85:58:42:84:17:
76:fa:c1:af:a8:88:30:29:b4:b7:69:f5:25:84:36:fe:da:86:
01:86:1e:1d:63:8a:90:ce:38:27:97:1c:81:70:d0:79:56:2a:
30:27:a2:70:35:1a:4d:28:66:d3:6c:65:7b:09:d3:57:90:76:
b5:09:79:d4:25:33:25:4a:e7:4f:16:ac:39:32:83:d8:b9:22:
b3:65:37:7a:60:a5:e6:2e:c1:f7:0a:dd:b6:eb:16:b0:32:d4:
a3:18:a9:d2:b7:6f:1e:4e:58:2a:02:ef:3e:2c:6e:18:5a:e5:
10:79:86:9b:1d:d9:f2:f9:06:9b:64:e5:67:81:5c:e8:1f:66:
7b:49:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:48 2026 by rpki-client