
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f947e7-7d33-3db0-9452-897171f525b2.roa
File: c2f947e7-7d33-3db0-9452-897171f525b2.roa (raw, json)
Hash identifier: P/yvGjMLl+wHiKz2ymY4AMQdtLO8iVWc5HFdv4osWhk=
Subject key identifier: 8D:94:14:08:E0:F6:88:97:E9:8C:FB:6B:39:89:61:BF:6E:6A:1B:7F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F82AD9FAB39A7DEE9DC18DE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f947e7-7d33-3db0-9452-897171f525b2.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 12222
IP address blocks: 2001:4878:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:9f:ab:39:a7:de:e9:dc:18:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=c1d22ed6-822a-4e79-9b56-b7c8d1618385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:44:16:83:e2:23:f2:b3:b1:df:df:6b:c7:
96:62:61:eb:b0:20:79:2e:a5:a6:8e:a9:22:8b:2a:
b0:cc:8d:27:5e:49:1b:bd:94:7e:5b:09:d3:7f:f4:
da:79:2d:20:49:9e:a6:b1:d9:1c:1f:cb:6c:ca:70:
a4:2c:c1:6f:9d:42:10:e2:5c:f4:a0:3c:62:66:1a:
f6:88:c3:e3:21:db:83:fc:59:a7:fb:38:b4:6d:ba:
fa:bc:fe:47:a6:c4:fc:9e:78:2d:4f:9a:5b:f5:6a:
1a:7e:a0:ee:2f:f6:96:e1:0b:44:24:6d:e5:af:87:
88:ce:9f:c4:0f:be:cf:2d:d8:4d:0d:05:76:87:9d:
e5:2a:4f:24:fb:a3:ea:68:d5:80:6e:d1:36:9f:2c:
66:c3:29:b8:31:cd:1c:26:9e:47:bd:25:6c:70:e6:
55:be:21:2d:9c:fa:61:08:13:bd:7b:34:2c:96:04:
67:69:c7:f1:f7:b1:67:f4:d6:ac:33:eb:11:8e:4f:
f6:c5:e4:f6:2a:f1:e8:e5:51:51:62:f6:73:1a:7b:
90:5b:8e:2c:68:94:80:32:07:f5:05:0c:56:cc:8f:
9a:74:d4:bc:72:0d:d6:4d:25:95:b9:7b:1f:61:45:
71:cd:5b:e9:30:92:ae:24:9a:b5:eb:07:3e:19:5b:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:14:08:E0:F6:88:97:E9:8C:FB:6B:39:89:61:BF:6E:6A:1B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f947e7-7d33-3db0-9452-897171f525b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:62::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:86:b3:1e:4a:f4:1b:b2:66:53:3d:30:f0:43:bc:a5:f7:c3:
59:14:d3:a2:b4:64:94:62:a3:a4:49:21:44:02:00:a1:58:14:
83:65:66:89:14:9f:f1:cf:f9:cc:49:b3:d3:45:43:39:18:cd:
d7:a3:7a:30:ab:7c:e7:0d:a1:bb:98:5e:69:b6:ca:31:c4:0d:
a5:22:e4:54:6c:f7:b6:79:93:cd:6e:d6:06:09:e9:c4:2d:98:
fc:b7:55:ab:c8:18:45:51:35:7e:81:4c:c2:a3:16:fd:66:a1:
3b:04:59:dc:15:39:bc:1b:1a:4f:bd:1a:de:9a:fe:70:fb:77:
b4:9e:17:ef:93:0a:1a:50:f1:a8:97:a0:ba:28:42:75:2f:63:
42:0d:7e:94:b3:1d:9f:d5:57:63:bd:1d:63:b2:2e:64:83:3e:
b3:1b:e1:6d:c0:c3:3c:54:63:85:c2:3e:c2:cc:dd:7c:fb:13:
66:da:2f:82:25:81:76:ec:08:06:7b:1d:ab:75:fb:f2:5f:7b:
9d:84:fb:e9:d0:cd:d1:08:d7:58:03:8f:d2:04:7d:82:df:06:
4e:17:f4:c4:67:f8:3e:cd:88:f9:94:42:26:b5:2a:10:d2:d4:
44:bc:8e:eb:d3:98:9e:a4:2c:8d:2b:5b:2b:d2:16:47:f8:0c:
f9:02:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:03:04 2026 by rpki-client