
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
File: 86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa (raw, json)
Hash identifier: 61NzZEFTgLZeIY3QpZvMDYghpbP+LkCXpGETk/3iRIc=
Subject key identifier: F0:CE:B1:8C:32:07:24:EA:AF:A2:FB:E3:F1:DF:A6:28:F4:E1:0D:17
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49881390FCB53FE97AF71DE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2d80:3a00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:13:90:fc:b5:3f:e9:7a:f7:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d6835af4-71d7-44af-8f19-d1975bf30015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:9e:03:af:42:58:b4:82:84:27:b4:1b:2a:
8b:d4:7a:7b:54:8a:e5:c6:02:55:ae:69:a9:be:fc:
24:53:27:40:ba:ab:2e:41:91:67:d9:d6:20:6e:b2:
80:ae:76:d4:68:8a:bd:92:11:0a:d3:cb:e3:71:3a:
55:74:87:d7:0b:00:48:12:d2:7c:46:cb:91:11:0a:
0f:4b:5e:98:51:79:ff:8a:ae:29:03:8c:17:a8:c9:
22:fb:ee:96:f0:1f:22:15:d8:d5:aa:b1:ac:57:51:
41:6d:02:45:a0:70:a5:9e:11:9c:a9:ba:ce:00:92:
f6:e0:1b:3b:a5:c7:cf:a4:0b:7b:7e:71:3f:a2:34:
58:86:39:f9:f8:e4:36:de:02:57:ec:2c:1c:66:7f:
a4:30:8b:eb:b4:e5:90:db:3d:4b:f3:4e:5c:03:19:
ef:d9:c7:d2:0f:66:19:41:f8:84:fb:fd:b8:3b:e3:
c5:a2:fa:09:ab:7d:99:53:40:72:15:bd:8b:b9:21:
fd:d1:91:78:06:ef:02:52:f6:0a:c9:e2:74:fd:ce:
5a:86:06:84:66:cd:bf:70:47:3a:c0:f5:a6:41:be:
f3:9c:fa:73:3b:16:8e:d5:5e:8f:b5:a8:5d:c4:5a:
83:7b:ca:0c:c7:a4:01:09:34:66:8d:dd:69:9f:28:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:B1:8C:32:07:24:EA:AF:A2:FB:E3:F1:DF:A6:28:F4:E1:0D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3a00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:0e:5d:8d:e3:42:87:7d:d4:47:20:bf:e4:ac:5c:d3:72:a4:
aa:c8:39:dd:3f:cf:8a:a1:5f:d5:66:e1:a8:19:dd:d6:26:23:
62:58:28:e9:9c:4f:8f:0b:fc:59:1b:9c:85:85:b1:9b:18:3e:
8a:b4:9f:38:2a:c2:c2:e0:03:71:a5:c2:69:a1:47:4c:0e:9c:
72:15:62:f8:62:9f:7b:24:c5:9d:5b:9b:63:da:4c:aa:6b:ec:
2a:07:21:c1:45:dc:6d:a2:8a:fc:53:82:af:14:d3:c9:a2:6a:
83:ae:9d:83:73:a4:98:c8:a2:41:94:11:d4:1c:a8:45:20:7a:
d6:d0:e1:e5:12:0b:76:2f:79:d1:65:db:2a:52:58:ef:a5:ba:
2d:ca:f8:57:14:0f:69:50:60:ec:a5:7b:08:64:e5:65:c9:7d:
ad:cc:52:54:de:4a:6e:a4:be:6b:b1:8b:3b:aa:fe:8d:97:92:
ac:93:47:e8:68:b8:99:ae:6e:e4:fe:8b:7f:ae:e1:d1:9a:fb:
d7:c7:78:99:9f:5a:50:a3:ca:6b:5f:75:0d:a9:f2:1e:d6:98:
a8:af:1a:04:2a:7f:d6:57:f4:2a:8c:57:97:11:0c:6d:bb:f6:
24:30:a3:79:d7:70:cf:8e:fc:b4:a6:f9:09:af:91:e2:39:2d:
b8:a3:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:56:56 2026 by rpki-client