
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
File: 3cb37982-fd30-3c19-ac7b-75845707a035.roa (raw, json)
Hash identifier: jdLKlx6hHU1/tSsrL5uh7/0iip1a2MscxIxEm/TfUk4=
Subject key identifier: E7:C5:1B:45:33:6C:44:77:58:76:82:DB:18:EB:B0:92:98:64:62:DD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EE0C1F44834E1E4A1D3FFE4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 12222
IP address blocks: 2001:4878:225::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:f4:48:34:e1:e4:a1:d3:ff:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=3bfee28b-6c9a-41d9-b0c6-4c6aa9a41e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:88:79:c8:78:36:4c:52:56:a8:d6:1d:8c:
03:f6:1c:b8:9f:71:03:1a:31:3d:3b:f3:0f:e4:f2:
5f:0d:aa:2e:10:8b:93:92:0a:ec:d3:06:99:54:e5:
6e:57:6a:2f:fd:53:39:14:b4:e1:8f:ee:16:7b:f1:
6a:4c:18:1a:37:f0:93:8f:d7:a7:7d:2c:38:01:f8:
02:33:d8:fc:ad:c4:29:c0:f9:9f:8c:d9:fc:39:ba:
2b:2c:a6:12:10:f6:a2:ff:91:bd:72:04:99:22:6c:
d7:0a:d2:ad:c6:d8:28:da:75:12:a2:92:12:14:80:
62:a0:9f:a4:2d:7f:fc:f6:24:15:4c:6c:07:2a:5b:
49:a3:75:c0:bb:d6:b2:88:b5:2b:65:c1:6d:09:f0:
37:7b:bd:6a:0f:a1:e6:7c:66:4d:e5:c4:23:5d:00:
2b:e0:00:8e:cf:df:1b:82:5b:bc:76:03:ad:24:3b:
76:1d:6e:58:ad:35:21:56:ba:ba:b8:64:4f:87:78:
6e:90:ac:8d:7e:fa:d1:e2:ed:f5:fa:5c:aa:b2:df:
46:d2:6c:74:a1:66:c8:58:81:20:99:4a:0b:1d:41:
b4:c9:a2:e0:38:52:46:c0:6a:6a:7c:5e:ef:6c:a5:
f7:ff:b1:4a:9b:9e:75:e3:70:48:84:5c:d6:aa:55:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C5:1B:45:33:6C:44:77:58:76:82:DB:18:EB:B0:92:98:64:62:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:225::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:fe:2f:44:29:d5:a2:a0:a0:15:3c:8a:a5:ea:80:93:1e:1f:
2e:ec:b0:d0:55:66:62:39:61:7c:ef:1a:93:ea:45:93:d0:b6:
14:fa:1a:52:32:73:44:42:f4:83:d2:0e:dd:5b:3e:ad:f8:48:
d4:7b:f5:db:4a:c9:a2:dc:e1:7b:4d:46:02:d3:38:ad:1b:af:
e9:7a:41:ec:7c:34:a4:0b:20:c2:9f:b2:f7:bc:97:d5:3a:b2:
f2:0c:73:1f:f6:f5:f1:0d:48:fa:a1:59:43:79:6c:82:ea:94:
c6:eb:2c:a3:e4:17:c7:d7:9c:d4:1f:2b:ca:34:7d:99:8d:71:
de:6e:e9:23:8a:ea:8b:1d:3d:87:80:0d:76:a6:34:52:44:ec:
d3:ee:53:0e:81:43:95:0b:92:9e:1d:df:06:e7:3f:7a:0c:cd:
86:0b:13:6e:e2:28:46:68:59:6c:7a:b2:9d:77:41:96:da:25:
76:b9:2b:78:ce:ab:f8:77:0a:77:cb:d5:c8:b9:c1:43:42:37:
f9:cd:09:6a:16:03:27:ca:6a:d7:3c:de:af:3b:14:d7:1e:d3:
6f:e7:65:d2:9e:20:ae:f7:3c:32:41:da:4d:46:b1:ea:b3:eb:
83:a5:05:cb:24:8d:8a:a4:c5:d0:15:0e:da:86:b1:7d:04:5d:
25:f9:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:26:27 2026 by rpki-client