
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4aa87f-7128-38b7-859c-5f10bdd054f9.roa
File: ea4aa87f-7128-38b7-859c-5f10bdd054f9.roa (raw, json)
Hash identifier: /p9nDrLmrwkYDc5UtZGXviKDC/exfrceSoGdh+b66XU=
Subject key identifier: A1:7D:A5:75:2F:80:2A:07:C8:16:25:3C:39:DC:64:C7:9C:8C:4F:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F4984715F2645B38010FC2F28
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4aa87f-7128-38b7-859c-5f10bdd054f9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2600:1488:6082::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:71:5f:26:45:b3:80:10:fc:2f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b4263d95-2e9f-4557-84fd-8c6aa486443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:66:e9:47:54:95:20:ce:2a:80:f3:ef:03:
f9:4c:8f:02:0d:e5:58:a1:51:2a:f3:6c:60:a2:0b:
b9:a9:ea:80:15:b8:2d:48:d5:ee:ab:09:72:13:02:
65:54:51:bd:32:3d:1b:d4:32:26:2d:36:39:f8:65:
5f:f0:f9:cc:f4:93:b3:c1:e3:dd:6a:18:e8:16:ef:
e8:a9:9a:e0:7f:3b:44:07:9e:8c:b4:85:be:10:76:
63:20:18:fa:25:a5:7b:6d:0b:45:d7:53:75:53:bd:
8a:8b:e5:65:90:c5:f0:ba:ff:d7:d4:d6:8c:cc:ab:
1b:8c:c7:7c:ec:8c:fb:de:65:52:6e:21:3c:89:b8:
9a:a2:a8:5a:89:1f:b1:70:8a:6f:96:2d:ee:cc:81:
4b:00:83:73:31:9b:76:d5:10:da:5c:27:1c:34:f2:
b7:44:b5:5e:dd:36:1f:eb:93:bb:87:a4:ba:6e:dd:
65:f0:f6:2d:1d:7a:df:f0:3e:bb:c5:79:7c:a7:8d:
1e:1d:d8:1c:a6:6a:f7:93:c6:77:3b:fe:65:67:c6:
71:87:95:75:aa:ef:5c:86:2e:30:e1:ca:4a:f9:f0:
ec:cf:e1:b9:a0:a6:3d:4f:db:af:8c:c8:45:7f:5a:
30:3e:6a:16:6e:47:98:b9:c0:cc:32:d0:bf:26:18:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:A5:75:2F:80:2A:07:C8:16:25:3C:39:DC:64:C7:9C:8C:4F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4aa87f-7128-38b7-859c-5f10bdd054f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:6082::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:95:05:21:5a:11:71:ce:cb:12:7b:84:57:a2:73:d5:21:f2:
cd:32:ce:29:1a:4d:80:89:7e:8c:24:4c:4a:e2:43:e9:5e:4f:
e8:0c:45:79:18:ab:e3:33:d2:b1:0b:0f:c5:d0:16:ec:d5:f8:
a2:aa:5e:d6:f5:02:32:02:dc:75:ac:6f:f2:ef:de:e8:c7:09:
41:6f:ff:6a:42:b9:5d:ec:97:d2:07:43:27:97:10:c3:27:03:
c2:93:ee:7c:a8:f6:61:e4:01:99:c2:85:5d:70:9c:88:ce:ee:
28:dd:0c:d6:21:48:bd:c6:48:eb:7a:dd:98:ee:25:7d:51:01:
47:d8:e5:f8:28:b3:52:f7:15:09:06:00:86:83:68:fa:4b:23:
5d:ce:67:2c:be:5b:53:79:2a:fa:92:e8:4d:50:ac:22:6d:19:
03:43:b2:21:e6:a0:0a:55:21:f2:5d:75:0e:ba:3f:71:f5:58:
76:a6:35:eb:97:93:da:61:12:08:82:fc:57:76:2f:b4:20:81:
89:ec:3b:6d:33:75:b6:0e:79:ce:9b:ec:70:15:ea:1b:5e:8e:
a7:d0:af:a8:59:bc:ce:f8:6b:bb:48:f2:6b:0a:b1:1a:3f:11:
58:dd:cd:36:e5:56:fa:91:ed:36:9b:26:01:1c:92:0c:29:a8:
4f:59:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:58:38 2026 by rpki-client