
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa
File: e68cb0e8-674e-39a2-8a2f-6e807080e407.roa (raw, json)
Hash identifier: DOYILL6vMYXeBUy8fsJ/wZCl2t0IhXQ0p3bb+n0DqHM=
Subject key identifier: 3A:B9:0F:C3:81:09:F0:78:3D:D7:61:71:9F:09:1E:F7:94:D8:C3:F1
Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial: 010D0C9F4328584E7E94E6E17BA4E9012ACC4AC0
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 53999
IP address blocks: 2607:f699::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:e6:e1:7b:a4:e9:01:2a:cc:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=5cade512-280f-4898-9db0-597ff3232a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:78:60:05:ce:55:48:43:dd:42:50:00:54:
ad:34:22:c5:d1:02:d2:87:ce:35:20:51:77:02:15:
33:2f:b8:2c:64:1c:86:ab:2f:14:38:2c:b4:0b:ea:
2e:38:cb:65:63:ab:03:ef:b0:81:8b:af:71:2f:be:
4a:15:69:3a:28:11:f5:68:2d:d7:2a:8a:27:1e:a9:
50:b1:96:69:2e:82:e2:00:9a:23:c6:59:09:98:d1:
a8:a6:7e:bf:2d:90:c0:00:31:32:5c:d8:f4:72:16:
c4:f1:c5:99:cf:ab:ae:43:f4:9e:68:05:28:8d:09:
6c:ba:01:f9:d1:b9:b1:be:a4:b8:19:b2:87:8d:2e:
53:1e:8a:81:47:4f:ca:02:98:00:10:9c:e2:aa:11:
eb:df:93:90:c3:40:c2:0e:cb:7a:6d:20:7d:48:c6:
e3:53:3e:c9:0c:6b:6e:f6:bb:92:1d:fe:fb:07:7f:
6f:57:62:17:a7:d7:07:f6:dc:0d:27:1e:f1:42:3f:
e1:89:df:cf:06:5c:30:ee:90:7c:44:a5:90:a6:dc:
8b:0c:c6:a0:64:68:e8:03:ed:c7:37:14:db:68:dc:
70:24:f5:00:a9:15:20:76:30:74:ed:89:b1:4d:8b:
2b:93:d3:47:ed:8f:40:10:eb:a8:f9:f8:ab:52:44:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:0F:C3:81:09:F0:78:3D:D7:61:71:9F:09:1E:F7:94:D8:C3:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
X509v3 Authority Key Identifier:
keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f699::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:fa:43:38:7a:06:b8:4b:7c:f5:5a:20:6e:5e:81:d7:22:03:
11:67:5b:5c:8e:6b:9d:07:bb:4e:f7:c9:9f:47:a0:08:69:68:
dc:0f:0f:89:12:2e:36:8d:1c:e5:a8:25:59:b5:50:3b:86:b4:
f7:51:6f:d8:72:39:9c:29:54:6c:d9:d8:88:b7:cd:77:4c:3b:
fa:a3:7c:12:cd:9d:cb:17:2b:81:9b:a6:fa:0f:3d:f5:c9:4a:
a5:3d:b4:63:8b:9d:ff:3a:f8:be:58:02:e0:56:ea:e2:46:9b:
e9:a2:d8:5f:6c:7a:e3:72:bb:9d:22:02:2d:1a:39:b0:66:db:
1b:0f:77:12:b1:d4:f2:4c:44:bf:29:af:7c:b7:85:67:71:75:
ce:fe:52:ab:bb:ea:d8:6f:cc:e1:e8:9d:a8:04:f2:57:c4:38:
30:7e:82:57:f7:b6:26:96:d6:a3:69:cb:31:d9:99:55:35:5b:
9f:bd:13:22:1c:5c:9d:84:10:d4:b6:25:e2:cd:5f:b2:86:cf:
6b:54:fe:88:42:bf:8e:57:2f:e5:43:e3:51:8e:c5:bd:53:1c:
45:3b:da:2e:19:2c:3b:dd:33:d1:7d:6c:39:d5:b4:f9:24:b9:
3b:a2:ce:87:a0:9a:9c:25:c8:f9:ad:2b:ee:03:1f:a6:6d:c8:
8a:b0:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:02 2026 by rpki-client