
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
File: 4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa (raw, json)
Hash identifier: IYjFkvYvrYw3XpcgcjczmKbSLR6vBCH1plmMtFSfW58=
Subject key identifier: EF:20:AC:F7:E5:A1:97:AA:B1:8A:CD:9E:56:1C:AC:D4:DE:D1:83:5F
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584EA8EC39DCDEF7FF7CAA345B00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 209242
IP address blocks: 2606:2c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:39:dc:de:f7:ff:7c:aa:34:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=2e119d2e-09c6-4cd2-ad2d-94ddefed4acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:f7:40:61:0b:8f:ab:06:55:56:f2:fa:6c:
ec:64:03:25:c1:58:7c:ac:73:a7:07:fe:93:12:1a:
d4:3e:7d:ac:ce:a3:23:07:b7:3c:77:31:be:49:5e:
93:ec:49:6f:c6:3d:7a:9c:ef:ac:f3:49:ff:cd:3c:
53:1e:08:5e:ad:af:3c:83:15:09:22:29:00:bc:d8:
39:ed:c8:fb:4e:87:29:08:91:1c:aa:9e:c2:3f:4f:
f5:8f:ec:53:0e:2f:93:f2:94:7e:69:01:ab:6f:fc:
c5:a8:39:de:c2:e0:d1:61:e8:bc:9d:d0:11:8e:39:
cc:ce:41:0e:6c:d5:74:4a:bd:1e:80:bf:6a:a3:00:
ca:b2:08:41:59:de:8a:12:71:c5:67:b1:6f:5f:18:
82:24:14:81:29:56:fb:c3:a1:c9:cb:de:9a:d6:72:
d8:ae:d9:cb:77:5c:86:85:29:00:9d:1f:f4:51:ab:
2c:45:04:1d:b5:c3:c9:c6:64:7f:50:07:6c:49:05:
3e:a9:95:5a:3a:cd:5b:fb:0f:4b:9e:ab:f9:3f:15:
20:f1:c1:6d:62:c6:da:61:f6:e1:e7:01:96:48:6d:
03:8f:a9:35:df:ed:b6:34:8d:2b:15:ab:83:a0:9e:
f9:88:98:af:b6:10:c7:94:c3:cc:5f:79:46:33:60:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:AC:F7:E5:A1:97:AA:B1:8A:CD:9E:56:1C:AC:D4:DE:D1:83:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:2c40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:28:89:2b:c3:ed:67:0b:04:c2:51:b7:53:06:f8:53:27:4c:
0f:3e:3a:ee:ad:fa:1c:c3:b4:5d:27:59:10:d7:ce:46:2c:d3:
e6:5e:40:3b:c6:b1:36:97:03:de:d4:61:57:bc:45:9f:19:c2:
37:de:c8:1f:38:5f:0d:db:b2:92:5b:2c:1c:a5:2f:ef:13:06:
32:54:f6:46:61:12:86:60:3f:bb:7e:b8:cd:a0:ae:b8:e5:94:
9d:e5:5c:eb:24:c1:34:9e:68:ba:f1:5c:c3:63:60:8a:60:e7:
71:b6:ad:7a:a9:79:e5:fd:1b:f2:e4:c7:91:d8:d6:2d:44:85:
46:dd:10:11:63:f0:ab:bc:c3:1e:20:bb:f1:22:93:0a:0c:22:
b2:4d:37:d5:2d:9a:23:10:dc:f1:56:72:dd:14:f5:08:1c:d4:
3c:ed:26:80:2e:c4:de:9c:43:85:86:48:a7:97:cf:72:ad:e5:
d2:7e:55:19:69:f3:ba:c4:d8:3e:01:6c:e9:68:6c:67:54:c9:
b9:c8:90:ba:d6:23:dd:fe:9f:72:56:4c:01:ed:95:30:50:1e:
21:c6:2a:0c:c9:e3:65:2a:1b:93:7e:ed:e1:6d:ca:fa:0d:8e:
b5:a1:90:fa:2a:34:70:63:05:34:7c:16:c1:9c:91:66:d0:69:
c1:36:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:47:10 2026 by rpki-client