
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa
File: d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa (raw, json)
Hash identifier: E8UJcI7K7gtxgp2IgUkaR6DSmI1EO3o4mbfBX5y+nS4=
Subject key identifier: A8:18:FD:CC:D9:AF:C2:D4:51:D9:EF:9E:C7:AB:BF:0B:01:E4:1F:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DF4DB77A738997E801D0EB400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 21342
IP address blocks: 2600:1480:f801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:77:a7:38:99:7e:80:1d:0e:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=71d62cba-4bde-422e-9bd8-ea29102f7401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:dd:98:9d:2c:c7:dd:b0:90:76:c1:06:7c:
9a:1f:9b:91:34:73:00:8a:ff:8d:7b:b4:54:4a:d0:
13:7d:0c:26:ca:05:6b:45:76:06:2d:10:3e:bc:d6:
e2:0a:b5:04:15:14:55:b1:25:56:9c:a8:ec:0c:78:
08:05:2f:88:72:2e:64:c8:4b:71:3b:d5:6c:bb:ca:
84:d1:dd:03:7a:4d:57:ee:6c:ca:14:99:8e:fa:4f:
cf:31:fc:c2:28:9a:f9:cf:8f:14:fa:2b:a3:8b:7f:
d5:a8:de:ad:18:fd:6a:2e:6b:69:a5:89:bc:49:6c:
11:96:f7:df:c5:6a:ca:7c:07:12:49:28:40:55:61:
d5:37:c3:97:88:f9:a9:3a:e8:f0:af:0f:b0:e5:3e:
a4:0a:b8:74:8e:7f:10:df:61:d8:72:85:0b:c6:31:
55:bf:76:0f:21:20:95:f7:12:6d:a3:05:3d:d2:e0:
50:84:dd:b6:80:18:2e:43:a9:fa:6d:e3:12:48:45:
9d:78:e8:26:74:41:29:4d:54:08:a4:fb:3a:a5:e7:
e5:85:84:8a:1a:c4:31:80:ab:d8:35:71:00:5a:75:
61:33:6f:6b:7d:e0:7f:26:2d:0c:67:d3:53:d6:52:
2d:f1:0d:28:db:d9:41:48:58:c9:02:0a:8d:96:c6:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:FD:CC:D9:AF:C2:D4:51:D9:EF:9E:C7:AB:BF:0B:01:E4:1F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9f969a5-426f-3cf4-aac0-8ee04e8dfd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1480:f801::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:37:11:88:c6:fa:d0:d1:cc:4d:a5:5e:27:06:5a:d5:62:20:
d3:42:a5:40:03:ee:2d:13:e8:40:9f:94:dc:a9:db:44:fa:66:
55:f1:9b:7e:f2:07:c2:85:dc:0d:56:26:6a:97:66:78:f5:fe:
df:62:46:7f:59:5c:bb:d4:84:2b:7d:25:e6:d5:f9:ac:1a:93:
1d:bf:64:1a:1b:62:cd:eb:aa:5f:84:36:fc:21:27:a5:d5:e5:
ca:8d:15:de:b8:35:ba:5e:c8:69:f7:9b:96:79:60:cf:83:60:
8b:11:c1:ea:42:d8:e6:d6:ea:03:11:17:43:cf:4f:2c:60:d5:
f6:97:91:04:b1:03:a2:53:96:80:98:87:8b:be:cc:bc:56:64:
83:60:6c:ff:da:4d:02:15:0c:6c:b7:8e:20:c5:f9:c5:0b:5d:
1e:10:ff:5b:98:13:f2:57:56:94:38:81:c5:45:24:88:21:b2:
c7:66:f2:81:77:28:35:eb:d5:25:67:b0:36:b1:04:49:f1:0b:
23:5b:09:1d:e4:ef:4f:25:24:7f:87:b6:3d:d1:0f:d2:dd:a0:
eb:36:13:01:46:92:04:f6:d8:18:f3:28:69:c8:84:b4:66:4a:
cd:3d:42:5c:d1:8e:4c:5d:74:89:5c:b8:e1:34:e3:ab:4b:d4:
bf:cd:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:14 2026 by rpki-client