
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa
File: 99b5cc08-06d4-353d-a718-989f6dcee309.roa (raw, json)
Hash identifier: NfVvFFkktJfuDZjDCrQv6rkfVTsW0tVeof+wWhVn3JI=
Subject key identifier: E4:C5:D2:F3:64:EA:F6:10:B6:B5:C2:5F:80:8C:38:9F:72:94:30:B8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA7931462A6154C61748E4500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 35994
IP address blocks: 2600:1400:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:14:62:a6:15:4c:61:74:8e:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=badb0a1c-807d-4bcd-8972-257661fdce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:f5:fd:08:d8:eb:1a:2a:8d:92:8c:82:fa:
83:8a:f4:4d:c8:f1:cd:02:88:7b:81:f9:5b:0e:25:
83:aa:51:e6:79:70:52:84:2b:31:12:1d:af:85:b6:
7d:19:0d:c7:39:36:60:4a:b0:7c:9d:26:d7:c5:4c:
31:2a:86:d7:bb:39:ac:77:b3:11:4b:12:35:d0:c6:
0e:64:19:a5:0f:1a:78:48:02:a0:af:2e:7b:18:51:
7a:41:a4:c5:1e:5a:d4:a6:83:ba:9f:26:53:22:cc:
f5:6b:00:58:ae:3e:d3:30:20:c9:40:e7:65:81:2b:
d6:a3:83:6b:6b:0d:d6:37:31:91:9f:bb:1c:3d:b2:
e5:04:d5:5a:12:f3:7c:82:4f:2b:37:b6:ce:74:42:
46:6e:06:37:44:81:d9:31:19:3b:43:ff:53:3f:68:
07:ba:82:c0:1e:59:a2:f2:e8:60:be:ad:27:71:dc:
84:0c:ba:25:cb:bb:23:c3:31:41:3b:65:ba:a5:aa:
8e:9c:80:9a:5b:68:d1:92:ef:1d:52:35:9b:5f:cd:
b1:0c:b9:b9:2f:df:d2:a8:c7:49:ea:32:f8:1d:36:
99:4a:3e:df:91:95:01:72:d6:9f:9c:fe:e3:c1:99:
19:27:76:8e:1f:28:74:c4:91:37:28:40:86:2b:f2:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:D2:F3:64:EA:F6:10:B6:B5:C2:5F:80:8C:38:9F:72:94:30:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1400:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e2:12:2f:b4:fc:9e:d0:3f:cf:c6:4c:ad:98:f5:4f:62:ed:
0d:e6:8f:64:d7:42:d4:19:32:fd:95:bb:7f:11:a0:e6:27:3d:
3a:d9:dc:26:4c:72:19:ac:49:0c:df:d4:1a:49:39:06:e3:5f:
72:a5:04:73:db:5d:80:07:a6:0f:e8:43:02:1f:87:9d:33:70:
99:70:f0:2e:ba:b3:87:b3:36:05:1a:d6:b6:f8:9a:7e:92:e5:
c3:a3:12:02:eb:59:f4:85:d0:a3:98:2b:58:f5:bd:8d:e2:16:
f3:5d:49:39:3c:a6:67:f7:42:c0:d8:99:04:a6:8d:c7:ca:f2:
20:05:50:cb:8b:5e:8e:a3:c9:38:2a:ef:b0:98:94:ad:5c:0e:
a3:c9:44:5e:a9:31:bc:66:77:e8:42:0f:b2:69:8a:ed:d8:79:
b0:e5:16:f0:d1:a9:79:aa:27:25:f9:37:52:0d:13:13:09:2b:
b7:3a:d2:89:61:fe:f9:30:76:05:ec:89:34:ba:1b:50:16:c1:
37:0d:7b:f9:8c:61:dc:6f:30:28:a6:ae:5b:65:8c:1a:4d:0e:
e0:a9:66:6e:95:81:e8:a8:93:eb:30:a2:65:8a:e1:26:14:50:
e8:86:03:58:d3:2b:3e:b3:46:44:40:8e:8b:8e:8a:d9:f3:db:
ce:c1:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:26:45 2026 by rpki-client