
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa
File: af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa (raw, json)
Hash identifier: VE9PA3cWGXcoSdxZvAqYljBXfDkslVUpispSJFtTDRg=
Subject key identifier: 18:88:A4:A9:E9:CE:D4:ED:23:6B:DE:3C:FA:48:05:29:22:9C:41:2A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E4129E0C3F9990B901CF7A5E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 20940
IP address blocks: 2600:1488:5fc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:e0:c3:f9:99:0b:90:1c:f7:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=41797cda-bb43-45a1-8756-34eb0c387b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:71:01:80:ff:fd:40:a6:e1:0d:2a:6b:ce:
ef:e6:5c:30:8d:6a:81:6a:e0:06:c2:7f:a5:4d:2a:
46:51:95:79:70:47:16:86:bd:8d:0b:2f:60:f2:25:
9b:6b:94:48:a9:3e:6c:d9:b4:38:bd:75:a7:b7:07:
3e:0d:17:8c:fe:73:73:be:ef:21:6a:48:c6:9e:2a:
9c:f2:a5:db:f2:e1:63:72:2b:d1:a7:28:62:75:af:
30:97:d5:fd:22:ac:15:a7:08:98:af:89:35:72:ea:
50:49:4c:68:c1:39:a6:aa:75:aa:4e:04:c0:00:a5:
33:15:ab:b0:f0:bf:a5:d9:0d:f7:60:69:4c:7c:65:
57:70:b7:5e:a2:74:01:51:63:ce:e6:22:e8:b9:99:
2f:ef:88:b0:87:b6:84:f4:4c:ac:37:3d:78:77:46:
89:1e:49:e5:58:ab:ec:61:3b:fd:9b:ce:4d:9e:93:
41:88:3a:a1:08:ae:fb:b3:61:c6:90:37:bd:f6:bb:
c9:03:12:2b:f2:c1:61:8f:a4:88:50:35:07:e6:86:
da:38:b2:0b:71:2f:d0:53:77:be:60:d6:71:45:92:
4a:6c:ea:90:b9:97:0c:5b:86:b3:1c:1f:bf:3a:e0:
86:f3:c5:74:9f:52:64:2b:a3:7e:f8:dc:13:73:19:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:A4:A9:E9:CE:D4:ED:23:6B:DE:3C:FA:48:05:29:22:9C:41:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:5fc3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b0:35:a8:c8:d1:b0:c0:33:a1:2f:3c:c4:8e:c8:25:2f:2b:
93:52:bf:a6:ca:23:74:6c:48:e7:94:6c:4d:14:5c:5b:5f:3d:
97:07:60:4a:cf:66:72:0e:8d:07:b5:05:55:df:0a:1c:7f:41:
e2:ba:d8:0f:1a:cf:cb:ad:a1:65:11:a5:b4:e3:82:cd:6a:2c:
ed:8b:65:63:08:38:4e:b3:38:b4:4f:a7:b4:ce:9c:20:b9:79:
2f:17:12:86:a4:cd:69:69:13:30:8c:84:b8:af:7a:38:6c:86:
ec:35:86:ac:18:19:b1:8e:8a:c0:40:4d:31:66:dd:ec:d3:5d:
86:34:18:7f:b9:fa:68:28:fc:5b:32:24:88:7f:88:46:8c:37:
92:16:3e:94:c6:7d:b2:7c:ba:cb:9d:ae:17:3c:f3:dc:2b:09:
27:90:db:2b:45:e1:c3:15:7d:17:4f:5f:55:3d:6d:f8:ca:d0:
f5:7e:14:9e:48:c0:65:2e:d1:23:53:6e:4f:83:62:9d:64:65:
41:9e:96:8d:e4:98:06:ef:42:e9:fa:c6:eb:1c:f4:89:46:84:
81:3a:1e:f5:db:5f:ba:7d:35:f8:4e:62:be:66:38:1a:3a:a7:
07:2b:e1:36:7d:94:71:65:ef:82:6a:89:77:d8:00:09:1a:d0:
92:b3:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:53 2026 by rpki-client