
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
File: e88df447-48d4-3683-8210-be5c56e4acde.roa (raw, json)
Hash identifier: qaCS8CxiWQJSEc0xHmuYpRCyPD54V9ca3nKcApnq/Mo=
Subject key identifier: 48:92:8C:0D:1F:A6:A9:29:8B:B2:C8:BD:F8:4F:9C:4F:A7:58:6D:11
Certificate issuer: /CN=856d400d-4340-4d39-9ec7-38c840be48be
Certificate serial: 010D0C9F4328584F1467A6103838648FD2329A20
Authority key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 213339
IP address blocks: 2602:f8d1::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:a6:10:38:38:64:8f:d2:32:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856d400d-4340-4d39-9ec7-38c840be48be
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=91eb873b-ef91-4074-a7d7-4098a09fd6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:f5:d2:f4:86:39:3f:9a:1b:06:71:f3:50:
01:c7:31:61:5d:0c:b0:fd:46:21:eb:3e:a9:f9:66:
35:f3:bb:ea:d0:ee:44:6a:88:2b:4c:8d:62:54:64:
0d:73:27:d9:6d:5e:16:d8:bf:c2:72:ef:33:6b:cd:
1c:10:73:5b:41:ba:b9:3f:ca:e8:58:2f:b9:31:f9:
7e:03:68:86:2d:67:24:ca:f6:60:1d:7e:e0:28:b2:
43:a7:09:25:e8:d3:7a:a0:72:01:d2:0c:09:84:15:
d2:81:a4:ce:02:93:88:18:59:47:16:69:87:1a:81:
fe:b1:52:9c:ed:8d:22:3d:70:90:f7:3e:58:45:dd:
ec:5f:86:67:7d:62:07:83:76:83:30:47:9d:54:1a:
9b:5f:da:de:a3:13:8b:64:a7:53:8a:58:ed:fb:26:
cc:87:80:a3:b7:55:65:f1:2d:aa:9c:b7:c1:22:62:
ac:20:c0:80:21:9f:bc:38:08:8b:05:ea:7a:ab:67:
fe:fc:df:5d:3c:7f:b6:6a:65:d9:1d:36:7f:a2:6c:
57:b6:18:02:e4:15:cc:1f:c3:af:7d:84:64:a9:af:
f3:99:17:ff:5f:f2:36:34:2a:33:6e:76:93:c3:9d:
ab:d5:ec:1e:ce:9a:aa:45:ca:d8:e5:26:e0:e3:6a:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:8C:0D:1F:A6:A9:29:8B:B2:C8:BD:F8:4F:9C:4F:A7:58:6D:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
X509v3 Authority Key Identifier:
keyid:A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8d1::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:da:58:c0:55:4c:ea:db:3b:7b:4e:a5:96:72:5b:c2:a9:72:
76:4b:1a:70:d2:91:df:97:88:05:28:2c:c0:49:fc:94:1e:98:
9e:da:97:3f:30:50:0a:85:71:c7:4f:4f:62:17:61:a2:de:ea:
f0:bb:1b:84:3d:61:69:4c:15:a5:e8:f5:49:8b:86:49:fa:3f:
50:d8:fb:cd:2e:d3:6b:0a:8f:16:1e:66:8f:ef:62:f3:f8:1a:
5d:86:42:19:7f:62:cc:6f:ee:24:6f:c2:2b:e6:1f:11:60:89:
77:c2:8c:f6:76:5b:bd:88:00:eb:d9:71:b0:47:95:77:91:35:
76:13:3b:5a:79:3a:25:71:de:3a:fc:ba:14:04:c6:41:0e:61:
40:f6:b3:4d:06:bf:53:01:13:52:0f:b8:86:29:16:74:b6:d7:
82:6d:58:a4:c6:f1:72:e7:23:6a:55:06:57:0a:12:a6:71:b2:
05:d8:14:c2:5e:b7:78:60:02:b0:a6:ab:95:02:57:31:25:73:
61:50:86:24:0b:3d:a1:f1:a6:c3:e7:48:9d:f0:ba:fc:bc:3a:
e9:3b:50:4d:2e:49:8b:34:bb:6f:6b:73:59:83:0c:a6:36:35:
3d:b3:2e:56:cd:0d:7f:e8:cd:f7:ec:8b:28:2e:41:b0:00:de:
f4:18:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:30:44 2026 by rpki-client