
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
File: 36a58b02-00a6-30dd-8d4f-2db78ed20646.roa (raw, json)
Hash identifier: PIqA/+TJF8bKrPqXlVHcQIXypX4y8vEbkT6lY8w4uYc=
Subject key identifier: 1A:24:82:42:36:7B:0E:6B:FF:4F:6D:D3:08:D1:2E:A2:B0:49:8C:EC
Certificate issuer: /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
Certificate serial: 010D0C9F4328584F4C3D6A1D9C3951BADA632280
Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 402585
IP address blocks: 2620:23:2000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 25 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:6a:1d:9c:39:51:ba:da:63:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=67a36565-3bb2-4d3c-8285-3cc5e77a656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:8b:03:63:ad:ac:3b:9c:86:3d:96:de:61:
f9:f5:c6:1e:66:1e:fd:58:ae:3a:3f:7e:60:de:e9:
c9:16:f3:69:68:54:81:22:95:05:31:7b:fd:33:bb:
10:01:d0:f1:7d:32:06:64:95:f1:7b:1e:cc:ac:fe:
21:f7:0b:67:42:39:ad:80:6d:da:65:12:ab:4f:3f:
5b:6a:39:b4:5a:c9:f3:b4:61:1e:12:ef:9b:74:a7:
34:1c:ec:73:db:4c:8d:54:b5:5f:da:47:ac:ce:ed:
9c:b6:bd:49:c0:2e:07:c5:e6:ed:b9:f7:ef:0f:1f:
e3:59:64:f7:d4:7c:47:85:bf:b1:e3:f8:8b:eb:fb:
7c:e9:b6:89:1c:fc:b3:25:b9:e6:b3:d2:89:a3:41:
bc:05:1f:ff:5c:0b:06:4b:35:48:57:e3:23:e0:2d:
00:00:5c:af:43:f6:18:4f:46:e8:1d:a9:d5:3c:2e:
7b:91:01:dc:30:45:6f:ec:a2:17:4c:8a:aa:76:18:
1c:4f:6c:00:d3:45:ee:47:d3:74:ec:52:26:c4:ea:
55:ee:e3:29:ba:73:d7:2d:99:64:ee:e3:78:45:f4:
48:34:7b:a0:3e:14:51:a4:8e:14:0b:d9:fc:4a:8a:
d6:74:9c:a6:cc:01:3a:56:7a:97:04:52:74:76:55:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:82:42:36:7B:0E:6B:FF:4F:6D:D3:08:D1:2E:A2:B0:49:8C:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl
X509v3 Authority Key Identifier:
keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:23:2000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ac:a1:3c:86:f8:28:e5:4b:ef:25:0c:f7:8a:57:0b:f5:c3:
b6:4b:96:56:d0:ba:77:65:f1:8d:65:d3:ce:27:94:9d:0c:93:
a3:2b:69:3d:95:d2:23:d0:15:cb:5e:94:01:91:5b:e5:e1:29:
f3:c0:3c:2b:51:f3:d1:8b:00:66:51:46:ca:04:40:7e:a7:e0:
9f:89:50:f8:c8:89:71:80:91:f9:2a:68:61:11:db:53:53:04:
b5:62:23:23:df:05:89:3e:5b:f8:03:11:67:44:00:e0:7e:cb:
b1:36:c5:e7:52:0f:a4:85:5d:3b:98:e6:00:7c:72:6a:cf:89:
4a:0c:c4:fc:33:ef:a0:d6:a6:5a:cd:2c:cb:a0:c7:20:a6:23:
44:43:a1:50:8e:d2:86:f3:d6:5f:9b:ae:48:bf:ab:aa:bd:3b:
be:da:4a:8e:3f:15:09:fb:9c:a1:93:d3:06:1e:ef:74:48:35:
3e:1b:6d:49:e1:fe:3a:49:11:e0:ed:00:98:2d:28:be:ff:1e:
29:06:60:74:9f:38:77:10:04:fa:1a:02:bc:31:21:fa:b0:c1:
f1:59:90:ca:43:a0:67:fa:77:de:09:d9:15:69:88:ca:2e:64:
ae:9f:f7:8c:74:4a:79:cd:a6:6a:27:66:69:b4:49:62:a1:a0:
b3:3a:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:23:19 2026 by rpki-client