
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
File: 86f557d8-087d-3afd-a352-3f7763892440.roa (raw, json)
Hash identifier: x6C8MaCZ/UtlGRDa7D+EHByTBHIgQOJDceA83XYupfw=
Subject key identifier: 02:00:B1:AB:CE:25:01:68:C8:1D:F3:7F:00:53:38:32:6C:7E:6B:67
Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial: 010D0C9F4328584EAFE6F6BBC211629A6BDA1E80
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 40271
IP address blocks: 2620:11a:b002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:f6:bb:c2:11:62:9a:6b:da:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=4a062c5d-33bf-411e-92c9-2e7bb457be7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:7f:27:d3:05:77:c0:fb:94:dd:7d:fd:c5:
4a:50:41:16:ff:0f:0a:e7:92:48:2b:a4:cf:46:ee:
e5:cc:9d:dc:a1:f8:f0:d0:25:6c:ba:83:0b:c4:62:
c6:8e:ee:89:fb:1d:35:33:8f:8d:76:f8:c9:24:2a:
33:75:d0:f9:15:a8:18:97:d6:8e:a0:15:e7:fe:18:
dc:39:8e:4c:61:35:a1:4a:d3:11:18:11:92:52:74:
cb:cd:b0:e8:ac:fa:23:14:14:96:97:a7:e1:39:b1:
ab:24:73:a1:d0:79:ec:d4:19:8d:a4:46:6a:91:ea:
fa:73:8a:7b:b6:ea:5e:f8:5a:13:ff:82:53:12:5d:
71:74:79:bf:33:df:d2:fa:0a:f7:a2:4d:a3:c9:85:
d4:43:d8:41:8c:ca:ca:43:4f:2a:cb:b1:c1:0f:30:
e2:08:42:27:3f:47:34:9d:bc:77:1a:73:b9:7e:a2:
2a:08:df:a9:42:42:fe:d9:ed:fb:d1:bd:e1:fb:d7:
0f:d3:d7:8e:6d:9d:7f:2f:6e:23:27:b3:be:b3:9e:
35:12:b3:4c:1c:73:4d:89:a9:4d:48:e8:c5:99:77:
05:8d:f2:e9:d7:19:af:bc:8f:b1:ee:4e:6f:3d:8e:
93:f1:bd:ca:c5:5b:ba:3d:23:42:31:8d:76:90:7c:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:B1:AB:CE:25:01:68:C8:1D:F3:7F:00:53:38:32:6C:7E:6B:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
X509v3 Authority Key Identifier:
keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:b002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:84:08:3a:4a:d0:e8:cb:38:b9:20:94:2e:c1:6d:fd:a0:22:
c0:59:55:fa:ef:1d:f2:c7:06:c4:9b:03:8f:85:74:ab:5e:6b:
ad:5a:72:fd:fe:7c:fd:96:e7:b3:8f:4b:44:db:08:40:2d:7a:
90:74:56:9e:e1:3d:be:57:4f:86:29:99:1b:87:c8:87:dc:b1:
fe:71:ca:44:51:87:0c:6a:c4:8c:17:36:87:8b:b8:86:ee:52:
9e:8a:bd:35:50:de:2a:fa:9a:aa:70:f7:46:2e:78:dd:82:b6:
7f:c0:ca:22:13:43:89:54:1a:8c:c2:db:35:98:af:8e:8e:07:
a9:2d:27:44:89:50:d1:ef:ba:d9:8b:a5:88:1e:98:86:16:5b:
d7:a0:b1:92:69:bf:9f:a3:05:9c:e6:dd:b5:22:da:c3:29:86:
1b:0c:b8:58:b6:91:6e:e2:62:23:50:45:94:0b:73:f4:e0:c5:
51:5a:a9:3e:eb:bc:24:54:77:49:1d:a7:48:c2:76:62:d0:95:
65:1d:98:89:33:fd:9d:fb:2f:e0:99:f1:b6:32:07:c9:0e:b0:
b2:03:48:c1:52:74:47:d3:88:46:3e:8e:9c:3f:45:19:a8:9a:
88:c7:38:f0:22:7d:74:28:e1:0b:65:8b:34:a1:9e:a7:ea:86:
5c:1f:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:55 2026 by rpki-client