
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa
File: b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa (raw, json)
Hash identifier: KPr5zDgoHWDsXKOFnSc/AADdLl9QrvSRqGdcDG+KyN0=
Subject key identifier: 21:60:91:E8:5E:99:C2:23:06:B1:EC:34:DA:59:BC:29:97:93:83:F1
Certificate issuer: /CN=a89dfa66-11db-4652-8710-2a69de76abaa
Certificate serial: 010D0C9F4328584F49730066906156592F80ACC0
Authority key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401947
IP address blocks: 2602:f447::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:00:66:90:61:56:59:2f:80:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89dfa66-11db-4652-8710-2a69de76abaa
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6f53b061-2ba7-4e03-a1e8-d47e17fecb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:5f:bb:b9:10:55:3f:aa:c0:10:49:6f:3e:
60:85:6b:c7:15:17:db:dd:b0:97:75:0a:29:1a:eb:
c2:f9:08:30:86:9f:d3:54:30:f1:77:41:32:3f:25:
cd:ba:50:f1:75:64:c6:ef:83:36:79:d5:d2:91:1c:
97:e8:6c:00:97:c9:ab:88:e1:df:c4:04:98:aa:0e:
c1:c9:28:a1:b4:c8:19:dd:60:9e:0a:a2:3f:c9:3b:
af:ee:bc:10:13:00:0e:16:bb:f8:fa:9b:e7:84:59:
30:6f:9c:f7:15:74:ae:b2:b5:9b:b6:7a:35:de:f6:
f0:13:a9:60:08:75:10:79:58:8b:93:e9:c5:c2:f0:
78:7a:85:3b:ec:ae:c3:41:c3:04:5f:dd:86:75:4d:
c9:a2:01:d8:3e:13:d2:16:d2:de:48:d7:f3:87:8e:
30:d3:7d:91:93:23:fd:7c:1e:97:9e:8e:ad:d1:1e:
7a:e0:17:c5:5d:52:78:10:e4:36:09:91:24:f1:c9:
83:79:25:32:69:9f:70:50:57:d1:ca:a3:49:03:de:
4b:9d:4e:44:25:95:40:33:4b:1a:ad:d8:9c:b2:03:
ea:94:95:9d:8b:d7:f1:aa:fc:c1:63:4b:ba:5a:e3:
95:cd:fb:8d:10:46:b5:82:52:36:29:d9:16:da:4a:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:91:E8:5E:99:C2:23:06:B1:EC:34:DA:59:BC:29:97:93:83:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl
X509v3 Authority Key Identifier:
keyid:45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f447::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:5e:35:bd:50:1e:5f:ba:85:c2:2a:77:8e:e8:5a:dc:d1:16:
3c:9b:75:00:18:ea:06:f3:ca:c3:26:7a:f9:5d:86:9b:73:88:
44:e0:b2:73:67:64:51:ef:4c:16:9b:9e:28:da:dc:13:be:24:
67:c2:63:4c:f3:b0:71:d1:63:ae:14:d0:bc:2c:3a:64:68:4f:
4c:fe:5f:a1:1b:b0:3d:8f:f0:44:7c:1c:42:5b:dd:ee:7a:74:
02:b2:e6:81:48:a4:40:81:8a:60:e6:9e:5e:d0:2a:7e:e7:46:
38:13:69:d6:c4:3d:a8:02:a1:4d:19:aa:00:74:c0:f7:ec:dc:
81:ca:fd:94:2f:bd:78:40:03:97:e8:93:b5:20:49:51:77:bc:
cb:8d:a0:c3:49:c3:cf:91:e0:0a:ea:15:d7:d9:92:73:00:32:
48:f6:9e:60:44:c1:e2:1f:63:b3:ae:95:5b:c2:9a:03:69:df:
70:0e:d7:05:66:2c:ed:f0:b6:a3:24:52:b6:15:09:39:a1:68:
70:08:fa:fc:2c:ee:c2:ed:1c:41:a6:5d:a4:a8:0f:1d:5d:25:
dd:f2:2e:ac:24:c2:4a:56:96:d5:54:25:72:fa:31:77:68:3e:
07:9b:41:c4:4e:39:fc:ef:e5:ea:ed:3b:a5:6d:a3:3e:0a:fa:
3e:c6:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:17 2026 by rpki-client