
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
File: dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa (raw, json)
Hash identifier: pRUwJFbX2T8PBuCQiesDT/UR5J7zu2EURKxAI9t/V7c=
Subject key identifier: BC:CF:B2:E0:D2:C4:4B:36:9C:96:45:A3:EB:4D:4B:3C:A3:4A:A7:E5
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F4328584F549D64F1F50F08EB0530A880
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 55195
IP address blocks: 2620:10a:80ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:64:f1:f5:0f:08:eb:05:30:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=463ea199-512f-4bb4-a15b-03ddba2e1a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:03:3d:2d:4e:78:f4:cb:fc:d0:db:86:4d:
85:e8:31:d8:28:32:7a:27:e2:b5:53:29:23:e3:a3:
8c:06:be:23:4f:db:ec:a9:bc:24:69:e2:d0:b2:ee:
af:b8:35:3c:4e:ba:32:c5:c0:c8:25:81:ea:b5:8a:
7b:61:67:9d:50:ef:aa:14:87:42:67:ef:9f:ce:ca:
49:4c:13:d7:95:35:79:98:22:04:1d:18:80:cc:9d:
d2:ff:3c:b8:1a:38:1c:ca:06:03:c0:c5:83:d0:1b:
db:b7:b7:f9:02:3a:85:ed:28:e7:83:7d:dc:d9:a9:
2c:be:2d:45:8d:a0:54:6b:c6:7c:9d:e3:db:72:45:
93:4b:ac:9e:c7:21:55:9e:b7:38:31:f4:f8:0d:a3:
31:01:43:11:0f:5e:f6:d5:32:cf:39:e3:eb:e2:4b:
b4:16:a5:f5:1e:c9:a3:be:c5:ea:c3:bf:b5:1e:85:
45:e4:b5:b0:6a:ab:8e:6a:33:8a:92:e5:bb:71:a8:
0c:97:b8:4a:5c:38:09:11:f3:8c:3c:08:03:77:54:
60:66:98:89:a0:dc:28:66:b2:ab:89:14:51:d0:1a:
67:2c:ce:9b:b6:5f:63:82:8a:83:97:db:61:21:c0:
55:14:f5:18:31:da:81:ac:fa:0e:e6:1e:65:94:ff:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CF:B2:E0:D2:C4:4B:36:9C:96:45:A3:EB:4D:4B:3C:A3:4A:A7:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:80ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f1:cf:26:ba:69:f7:d6:ea:19:e9:a9:d1:de:f7:c6:b1:41:
45:bd:c5:82:07:45:10:38:7d:1e:b7:75:5a:ba:ef:d4:5f:b5:
70:e7:48:83:b7:8c:dd:05:b5:74:a2:61:7a:2c:e7:72:76:9e:
5f:e6:51:01:5b:80:d9:b3:7c:a0:bb:6e:e1:be:c8:eb:98:3e:
92:13:d2:ee:ab:a7:56:25:f7:12:aa:33:12:76:3c:7f:8a:1d:
a0:d4:e4:80:f3:3e:a5:51:99:c8:a6:19:43:9a:80:e2:bc:24:
9a:32:7b:f4:80:a7:97:2a:c6:83:05:f2:1b:c4:2d:34:d6:cb:
b3:8d:ff:d8:f1:07:e8:8c:32:c9:d6:8a:fa:b4:e0:1f:99:e3:
e9:db:d8:bc:59:a1:b0:71:66:6c:c6:a1:81:70:08:20:89:89:
62:50:8d:b5:6a:d9:0e:de:bb:e7:43:d1:c5:59:47:8b:8a:7e:
78:28:c4:5e:ba:f8:e1:13:3b:1f:0e:01:a4:b1:de:7c:1d:a9:
35:39:b8:84:1c:23:62:9f:b0:b8:8a:58:e6:01:a0:71:18:2c:
80:12:27:dc:40:33:a3:70:db:82:d3:e6:ff:8c:72:b0:f4:6e:
88:9f:cf:f1:19:df:68:bb:72:94:d4:aa:89:41:a6:78:ab:8a:
33:19:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:54:23 2026 by rpki-client