
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
File: 9df4a168-5353-3835-8ec0-fd968df0dab7.roa (raw, json)
Hash identifier: 8PP8l+xPZ2vMewOyoDK4/0r4aESBUIOF9Gr1fJhZ+Zo=
Subject key identifier: EB:CF:D3:1E:E0:3B:5A:F8:BF:4F:BD:38:88:41:79:82:0A:65:C5:EE
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328584F00DCCA270338B6D88F88F980
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 397763
IP address blocks: 2605:59c7:f081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:ca:27:03:38:b6:d8:8f:88:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=47ad39c8-6955-4275-b3f8-35a8dd3170f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:40:cb:11:b7:20:75:1a:2f:e2:7f:97:dc:
bb:45:84:24:a1:13:2c:20:a8:94:53:f4:ee:27:b7:
14:3b:bb:95:fa:de:ff:9d:45:94:46:d2:a9:55:d6:
bd:0a:27:17:83:92:7a:73:e3:ea:1d:76:d0:57:78:
fb:1c:0a:5c:d5:ec:59:1d:31:f2:bd:25:ca:04:b1:
5e:f5:6a:a1:2e:d4:b5:4b:75:82:26:ad:a7:75:89:
3a:68:eb:d5:29:b9:43:72:28:58:ae:67:98:e5:45:
04:4d:3e:ff:5c:75:43:4c:1d:eb:01:eb:0b:11:f0:
1f:23:dd:cd:b9:fa:be:99:fa:0a:e6:c2:c6:9c:42:
73:c1:44:00:85:aa:4e:a7:ad:35:64:99:ab:3c:61:
5c:5f:fb:60:31:1f:d4:0b:3e:c0:b7:d2:f0:46:c1:
fe:f7:d2:f8:99:f6:cf:d4:c2:7b:4c:67:4c:a3:4e:
18:38:06:2c:38:7b:6d:ce:5e:94:0c:ad:dc:6e:f0:
0f:b9:78:ef:35:24:ee:8e:f5:0d:77:79:4c:b3:bc:
4b:72:b8:6a:cb:97:fd:79:a0:1f:00:70:6f:be:f0:
75:b3:a5:24:8c:a0:3d:be:37:9e:d3:9f:b8:22:4d:
5f:59:12:ed:d1:fe:95:64:0d:c1:70:15:0e:1c:eb:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:D3:1E:E0:3B:5A:F8:BF:4F:BD:38:88:41:79:82:0A:65:C5:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:59c7:f081::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:32:e2:27:57:cc:60:de:15:29:9f:e6:a2:81:8e:05:8f:b4:
df:01:f4:37:a1:a7:40:8e:f6:2e:3c:d6:85:48:43:28:ac:1a:
25:d1:df:e5:6b:16:b9:31:5a:8e:a8:91:4b:76:8a:a4:45:46:
28:d3:cd:90:7b:70:a0:c3:c6:00:d8:fb:e4:fd:dd:0a:69:40:
6b:2f:7c:72:78:5e:e8:f9:b7:e2:f0:dd:c8:b8:8f:7d:ff:22:
de:3e:b4:37:a8:0f:12:9c:00:44:13:af:21:ff:72:92:db:fe:
e9:84:7f:f1:7b:ab:96:1b:d3:3d:57:c6:4e:0d:fb:bd:bf:a1:
91:31:93:81:78:a1:ca:0f:dc:8f:72:99:50:fb:8c:07:34:c8:
de:7a:86:04:94:aa:3d:8b:30:99:5c:b4:c6:8e:eb:2a:bd:77:
e7:d5:58:24:96:7d:9b:e0:8b:19:12:89:34:59:4d:42:ea:20:
2f:7d:44:4b:28:ba:b4:9c:45:f3:a1:31:d0:10:a5:27:e0:43:
7b:da:ed:ce:1e:db:39:bc:6f:f2:e1:e1:5c:f3:74:4c:40:3d:
9a:d2:43:68:03:4a:0b:5b:08:99:95:9e:19:5e:36:4d:1a:bf:
54:a9:9f:a4:cf:02:ee:73:dc:1a:21:1e:c8:28:67:44:34:19:
73:8e:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:55:51 2026 by rpki-client