
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa
File: ffd1afb2-ad50-3fd7-9185-09d034503219.roa (raw, json)
Hash identifier: 0oz1KSqwEIrtikhoiEPMH6oAB+q6wj+BHSRVlDNX9/U=
Subject key identifier: B2:75:EC:D7:B9:30:A3:F0:63:A7:93:26:88:56:77:8C:BE:99:30:99
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584F71EDA357FFB63529855BC040
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa
Signing time: Fri 09 Oct 2026 13:00:13 +0000
ROA not before: Fri 09 Oct 2026 13:00:13 +0000
ROA not after: Thu 07 Jan 2027 14:00:13 +0000
asID: 20253
IP address blocks: 2606:bc40:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:ed:a3:57:ff:b6:35:29:85:5b:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Oct 9 13:00:13 2026 GMT
Not After : Jan 7 14:00:13 2027 GMT
Subject: CN=4f55d81b-82c3-478a-9450-b0c5253cec86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:60:e0:0f:7b:21:0c:fc:5d:e8:b3:88:4a:
fb:77:4e:ae:43:68:97:dd:18:e8:f4:a2:ea:aa:cd:
26:fb:f5:2c:f9:3b:5e:d7:81:a7:33:85:41:cd:08:
e7:a3:3b:65:92:c7:dc:fc:a0:42:84:8a:a5:e9:c7:
fa:9c:df:14:b1:23:d2:a1:6d:c6:3e:e0:5c:e9:19:
2f:a4:a3:bc:56:70:25:50:51:9f:95:a4:7d:86:76:
5f:fb:60:0b:3e:00:19:93:ef:fd:38:21:0f:e4:26:
59:ae:b3:ae:7d:98:27:30:e4:1e:6d:a8:79:0d:f7:
59:20:a6:27:4f:42:f5:6f:52:92:6d:92:04:4e:78:
22:6c:67:b6:6a:8b:a1:80:a8:17:73:d0:8c:77:59:
2a:10:a0:19:1b:d0:fd:fb:b1:61:96:4f:7f:a3:b2:
ab:25:7a:ee:81:53:fd:25:96:23:09:08:02:ba:be:
ab:08:19:af:63:9b:58:a9:46:a4:cd:ca:79:73:f3:
18:fe:cd:a9:76:18:21:21:c7:a0:8f:0a:2f:f6:ea:
c3:91:44:ce:02:c4:8c:31:77:b9:5e:a4:b1:6a:50:
29:b0:b0:f2:b7:1c:18:72:ee:71:8d:a4:9d:4b:12:
1a:42:07:fd:a9:a0:89:94:1c:de:83:7b:1e:c7:07:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:EC:D7:B9:30:A3:F0:63:A7:93:26:88:56:77:8C:BE:99:30:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:15::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:2a:bc:d6:8e:ac:30:a8:60:53:a8:6c:29:ba:4e:7c:ca:52:
9b:bf:df:a2:24:0e:7f:29:ba:fa:8f:9f:91:41:36:79:ac:85:
ef:b4:a7:87:92:79:8a:11:51:d5:03:2e:9f:9f:f8:48:e4:79:
9d:f3:8c:05:1f:3d:d9:a8:0f:5b:8a:86:a0:67:35:e5:15:bd:
db:16:ef:ae:d3:ee:33:24:3f:05:63:f3:ef:40:53:46:df:06:
eb:0e:b5:e9:e3:6a:a5:5a:2c:d8:4f:46:7a:22:9b:c8:82:75:
e9:bb:da:84:fe:06:70:9f:01:60:20:2c:56:56:e4:bc:15:83:
19:1a:c7:1a:83:64:71:39:b4:9a:5d:d2:b2:58:d3:b3:b8:a0:
c2:4a:05:52:1e:fb:2b:85:d0:bc:31:a6:41:15:27:33:86:5e:
1b:19:ef:f7:e0:80:f3:10:8e:ce:a9:ba:e2:40:12:08:1b:fb:
89:5d:f7:02:05:21:93:20:26:55:22:89:2d:98:95:59:90:a6:
ad:7c:a1:3a:1a:6d:36:3c:c9:c9:e8:46:9a:ed:cc:bc:1d:a7:
ce:d6:51:1b:ed:fd:9e:d4:c1:10:fc:ca:b9:98:4d:27:54:44:
cb:0f:a8:0f:46:b0:eb:5a:36:83:f3:e4:0b:62:e8:44:2b:0a:
9c:c1:f4:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7aNX/7Y1KYVbwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
NGY1NWQ4MWItODJjMy00NzhhLTk0NTAtYjBjNTI1M2NlYzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvZg4A97IQz8XeiziEr7d06uQ2iX3Rjo9KLq
qs0m+/Us+Tte14GnM4VBzQjnoztlksfc/KBChIql6cf6nN8UsSPSoW3GPuBc6Rkv
pKO8VnAlUFGflaR9hnZf+2ALPgAZk+/9OCEP5CZZrrOufZgnMOQebah5DfdZIKYn
T0L1b1KSbZIETngibGe2aouhgKgXc9CMd1kqEKAZG9D9+7Fhlk9/o7KrJXrugVP9
JZYjCQgCur6rCBmvY5tYqUakzcp5c/MY/s2pdhghIcegjwov9urDkUTOAsSMMXe5
XqSxalApsLDytxwYcu5xjaSdSxIaQgf9qaCJlBzeg3sexwe1pQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLJ17Ne5MKPwY6eTJohWd4y+mTCZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZmZkMWFmYjItYWQ1MC0z
ZmQ3LTkxODUtMDlkMDM0NTAzMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYqvNaOrDCoYFOobCm6TnzKUpu/36IkDn8puvqPn5FBNnmshe+0
p4eSeYoRUdUDLp+f+EjkeZ3zjAUfPdmoD1uKhqBnNeUVvdsW767T7jMkPwVj8+9A
U0bfBusOtenjaqVaLNhPRnoim8iCdem72oT+BnCfAWAgLFZW5LwVgxkaxxqDZHE5
tJpd0rJY07O4oMJKBVIe+yuF0LwxpkEVJzOGXhsZ7/fggPMQjs6puuJAEggb+4ld
9wIFIZMgJlUiiS2YlVmQpq18oToabTY8ycnoRprtzLwdp87WURvt/Z7UwRD8yrmY
TSdURMsPqA9GsOtaNoPz5Ati6EQrCpzB9EE=
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:59:32 2026 by rpki-client