
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
File: 28fc964b-d021-3c83-80eb-e3bea9004433.roa (raw, json)
Hash identifier: 1qd3fJxVytTfw/5W+lfQS+auyJFyiLrjRpa47wj/zxY=
Subject key identifier: E5:2C:9C:2B:F3:22:3A:56:BE:FC:4B:FA:8D:86:04:4E:39:E6:35:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E4129CE30AD42FDB69D66DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 12222
IP address blocks: 2001:4878:a136::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:ce:30:ad:42:fd:b6:9d:66:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=700997df-f7d6-4bbe-bc63-15be04d5d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:8b:9e:7f:b5:a7:91:ff:cb:61:a5:ad:3c:
0b:7a:32:63:20:9f:8c:1b:52:0e:9a:8a:49:f3:ec:
74:9c:85:d0:a1:36:12:51:c1:c0:f3:80:5a:35:ab:
56:61:c7:54:0f:92:64:e6:34:39:08:10:d4:54:3f:
67:04:04:d3:df:de:c3:c3:90:79:af:d8:03:57:52:
d8:c2:33:71:db:65:e8:84:4b:43:70:f2:dc:84:78:
86:b2:a1:be:81:e0:b6:21:b1:07:af:f8:96:16:ad:
fc:9e:f9:7c:d9:08:ed:ab:43:65:6c:ae:1e:fe:28:
ce:78:59:a3:47:fd:90:ae:96:7d:5a:e3:0f:9d:a9:
db:e9:c0:14:2e:65:16:1c:b5:4c:39:ec:58:4e:f5:
07:79:fb:94:25:b9:78:4c:d8:98:4e:04:85:04:fa:
21:a5:ad:cb:72:80:a3:00:b0:a0:43:3d:ea:25:26:
fe:55:e3:09:f5:4a:c5:dc:5b:97:3b:37:8c:fe:78:
eb:04:20:30:7b:23:e5:bc:12:15:5f:fe:41:15:2f:
85:51:a8:a8:de:33:38:0e:34:28:1e:5a:99:fa:08:
21:eb:6d:86:81:f6:32:b4:d7:38:01:79:82:8f:ff:
96:66:61:c5:67:31:2c:33:d3:3a:a2:6e:71:d5:23:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:9C:2B:F3:22:3A:56:BE:FC:4B:FA:8D:86:04:4E:39:E6:35:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:a136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f0:7e:a8:e4:c4:f6:e8:4a:8b:e9:a6:03:92:55:c9:69:c4:
bd:bd:bf:5d:ab:39:e3:bc:9f:ce:9e:d9:bc:01:1d:a3:95:f0:
92:f4:cb:1c:4e:f1:46:ff:b0:c8:c2:b5:11:ca:cf:c8:28:72:
65:83:01:86:45:e6:20:e5:74:fa:40:66:4f:92:e2:f2:4f:9d:
c0:c2:56:37:44:14:3b:f6:e5:3b:16:76:ed:80:17:e1:0e:97:
c6:68:1b:0a:10:af:a6:06:77:c5:8d:b9:0a:98:78:db:ea:97:
7e:e8:3a:c1:4b:80:85:d0:91:41:eb:20:04:dc:e2:7b:e7:84:
06:a8:5d:e1:21:69:0c:0d:7c:87:6a:85:aa:51:56:e3:23:bf:
65:0c:d5:ef:cf:18:59:fc:be:6a:5e:81:e4:53:a2:13:5d:f5:
a3:e6:82:47:9e:f5:2e:8c:fd:b8:af:cf:f7:72:15:90:26:d9:
92:ca:bc:58:51:22:f3:a2:a0:32:89:04:60:92:3f:56:59:fe:
bd:69:2b:8b:ae:71:fc:b7:ac:87:32:b5:5f:49:e4:2b:06:35:
68:23:4f:93:94:1d:48:b2:aa:84:16:49:4c:bb:66:5c:65:c3:
5c:9e:dd:f3:e0:0d:e2:76:bd:de:26:12:be:a3:f2:a9:a0:b6:
69:59:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:27 2026 by rpki-client