
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/cd9cdf68-9c71-3e55-8220-7dd9bbd3d6f8.roa
File: cd9cdf68-9c71-3e55-8220-7dd9bbd3d6f8.roa (raw, json)
Hash identifier: XcFzcCZOzyds8mEJWxkqLeRxrTl/rFkA8BELWVMAtUQ=
Subject key identifier: B1:A5:AD:07:13:C4:73:E2:E3:B0:83:81:62:E2:86:5B:C6:74:64:C2
Certificate issuer: /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial: 010D0C9F4328584F49730C4250B07DCA8EE0D940
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/cd9cdf68-9c71-3e55-8220-7dd9bbd3d6f8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 56201
IP address blocks: 2602:801:c00a::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:0c:42:50:b0:7d:ca:8e:e0:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ae6f946a-88a3-498b-9e5a-67114a7402f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:92:53:21:c1:d7:f3:4a:b0:0b:92:45:68:
9f:99:d4:3f:c2:fc:6e:a9:5d:8e:82:83:0d:52:fa:
d8:10:7b:5d:13:6f:22:e0:e8:e2:d6:5b:23:62:7c:
50:f9:3a:65:e6:ad:93:8e:79:2d:cd:59:b6:fb:30:
e9:d4:91:19:7f:39:a7:84:34:5b:98:25:f3:13:1e:
e3:92:81:1a:3d:10:23:0d:92:54:07:fc:e2:e8:d1:
82:ed:16:3e:63:09:78:6a:5d:20:90:a6:34:eb:85:
e9:e5:b6:d8:c3:4e:f3:0b:7b:32:16:74:e4:96:cd:
5c:08:6d:e4:fd:9b:5d:b8:d6:c0:72:6b:32:31:8d:
18:2f:cb:0e:81:a6:3b:a2:8a:fc:4b:fd:1d:2f:f7:
db:4a:29:77:86:8e:cf:ba:49:6f:78:d1:68:b5:ff:
b0:bc:9b:d4:7f:e3:46:1f:b4:b3:a2:e4:b3:ab:a8:
cf:95:06:89:3c:97:d8:13:b0:0b:29:31:4d:99:5b:
cb:d0:cc:8c:67:74:26:a0:8c:0a:22:da:25:e4:20:
53:61:cb:ef:7c:1c:26:e9:27:47:0c:33:24:8f:13:
9b:5e:b1:b8:a9:f5:71:e3:f3:ad:b2:2e:6e:80:96:
be:07:70:ba:23:7a:2d:13:c8:df:ec:f1:9e:96:9e:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:AD:07:13:C4:73:E2:E3:B0:83:81:62:E2:86:5B:C6:74:64:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/cd9cdf68-9c71-3e55-8220-7dd9bbd3d6f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
X509v3 Authority Key Identifier:
keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:801:c00a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:5f:0a:13:bd:a2:e1:61:d6:53:f0:80:a0:49:4d:2e:ec:1b:
17:c8:fc:97:ad:4d:90:6d:94:d5:d4:84:c3:4d:ea:5b:5b:61:
d8:64:d4:da:76:c5:b5:4f:0b:16:dc:f8:53:48:ec:6e:3a:d9:
f3:df:c9:b2:a5:69:de:06:3c:6e:be:b4:1d:f9:40:ed:58:d8:
16:8c:ef:2e:4c:26:9c:ca:b1:0b:3f:c8:2e:0f:c1:70:cb:c1:
22:b5:67:d8:cc:b3:be:19:5c:4e:f6:a8:32:07:cd:db:82:77:
59:9d:45:86:cb:fe:f6:b9:7f:4b:2d:4d:bc:5a:13:e8:3a:e9:
fd:d6:b8:ee:28:b3:77:dc:41:e7:e4:a2:9a:1d:e3:50:2e:1e:
30:a5:71:e3:55:cb:ee:3d:91:ad:9d:2f:a4:1b:70:1d:e2:ee:
a1:6b:88:2d:d7:a8:8f:a9:7c:07:ce:d7:6f:97:9a:b9:0a:41:
5e:8a:40:2f:41:b4:46:b3:45:4f:d2:e4:8c:50:92:29:ae:6d:
69:14:e2:6c:b1:95:4f:33:93:86:7d:43:0c:ed:b9:f6:64:98:
b8:34:8e:df:7a:09:d9:d9:f8:e0:c1:0b:2d:45:44:2f:9e:bf:
e5:e4:0b:d9:6b:c4:39:3a:d8:e5:f9:b7:2b:61:16:a3:8f:6a:
75:b4:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:05:15 2026 by rpki-client