
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa
File: 5684ef27-cf35-3a70-a267-ca8e544323ba.roa (raw, json)
Hash identifier: lrG02r+i+Z2a0ZRvwE+n0NB2DUArulkuVCXBPotFypc=
Subject key identifier: E2:8E:73:4E:6C:5C:3F:E6:48:4D:E2:EF:95:9B:72:91:52:52:FB:E5
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F4328584F3B7D268820DD8703A5368D00
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa
Signing time: Sun 20 Sep 2026 01:00:11 +0000
ROA not before: Sun 20 Sep 2026 01:00:11 +0000
ROA not after: Sat 19 Dec 2026 02:00:11 +0000
asID: 49
IP address blocks: 2610:20:6fcb::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:7d:26:88:20:dd:87:03:a5:36:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Sep 20 01:00:11 2026 GMT
Not After : Dec 19 02:00:11 2026 GMT
Subject: CN=9e29e2a8-9c41-4744-83a9-3a04fa72cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:14:a6:2f:5f:a1:7b:49:70:f6:c4:a1:a8:
3b:75:62:6f:b2:bc:e2:8e:14:3d:d1:0c:d3:4c:e8:
59:c6:ae:92:d3:68:d0:cf:cd:9e:27:70:da:04:98:
1e:5d:da:bc:94:24:5e:2d:63:bd:1c:8d:3d:2a:28:
a1:ac:15:3f:fe:2c:3d:66:bf:76:b4:ef:67:26:0a:
00:da:8f:9b:3c:0a:12:0c:76:7e:7e:cb:f9:0d:16:
b5:8e:44:fa:8b:b5:7a:0e:59:cd:b8:b5:31:dd:11:
37:b7:95:76:b1:1d:f0:4e:c9:cf:29:fb:24:7b:5c:
d6:3d:6e:0b:af:92:a0:01:90:2d:11:b1:d7:c2:b4:
a0:94:97:1e:4a:4e:ef:7d:5f:0e:f4:a2:a0:96:c5:
26:ee:c1:0f:c8:b9:e4:b2:3c:78:30:cf:cc:f5:b1:
67:39:ae:60:d1:c0:9e:c0:6c:55:19:95:a3:4d:15:
6c:57:20:14:b9:65:a7:44:2b:d6:16:df:f9:7b:4a:
2e:4e:ae:82:f0:46:05:45:c2:f7:c0:8a:44:e2:9e:
2a:a4:03:fa:72:2e:18:d5:00:c4:c4:3e:4d:5b:ca:
a0:98:6f:ec:a4:9a:aa:42:9e:9a:91:8c:b5:13:64:
b4:61:1a:46:d1:c2:15:26:b1:2e:85:00:d7:48:09:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:73:4E:6C:5C:3F:E6:48:4D:E2:EF:95:9B:72:91:52:52:FB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/5684ef27-cf35-3a70-a267-ca8e544323ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6fcb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:08:8f:07:60:13:d2:80:55:17:6c:f2:f3:2f:b4:de:c5:c0:
17:45:c9:db:76:8d:1d:f8:1e:48:00:16:3c:6c:c0:ca:84:25:
14:01:e1:2b:0a:67:9b:0e:ba:ef:b5:0b:9b:2f:4b:3a:74:10:
6d:71:39:dc:90:33:07:50:20:6b:e8:7e:bf:25:ea:f6:3d:e0:
b4:87:6c:c3:2e:88:a5:47:5c:15:3e:29:c9:59:1c:58:a9:54:
5d:a7:a6:1d:12:f9:05:b2:e2:5e:43:60:b0:50:28:0e:9c:88:
43:5e:c1:ff:6b:0a:4e:69:c3:fe:5c:9f:32:b9:a2:c4:bd:3c:
92:12:3d:9e:b5:89:96:3e:82:04:8f:5b:77:0c:57:18:12:f4:
34:6e:09:d9:5a:bd:83:cb:d0:33:11:bf:e3:7d:8f:37:ce:e8:
4f:6d:89:1e:42:35:2e:8d:db:db:66:d1:c0:c2:1e:22:9f:51:
5c:32:3a:d8:11:7c:c0:fb:d1:eb:97:a4:6b:24:b2:ff:78:70:
d4:c5:24:4a:0b:e3:05:30:fa:c7:21:78:0e:c2:bc:ee:cf:4e:
fd:69:a2:7a:80:ef:b5:10:06:46:2f:0a:4d:b4:c7:ff:3a:e6:
0b:63:fe:fa:15:de:1a:2b:6f:b4:17:d4:e8:92:6c:2c:3f:b4:
c9:f3:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:46:12 2026 by rpki-client