
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/7688aa3b-864e-33e0-a87e-5dddae05198d.roa
File: 7688aa3b-864e-33e0-a87e-5dddae05198d.roa (raw, json)
Hash identifier: CyEPFKsk4+AJifBTLYZNNt0kEM0B+p1Ra/DIGlyRByE=
Subject key identifier: 29:20:44:59:2C:7D:1B:27:B3:B9:FA:E4:22:A2:08:F4:A0:85:60:22
Certificate issuer: /CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Certificate serial: 010D0C9F4328584F4972DFF619DD7732F2ADC620
Authority key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/7688aa3b-864e-33e0-a87e-5dddae05198d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 3852
IP address blocks: 2602:f4ab::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:df:f6:19:dd:77:32:f2:ad:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=98b36075-edfa-40e4-8436-ada312c6a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:01:fc:4a:79:7d:a2:c6:df:85:36:cc:bc:
74:3c:e1:ef:2a:69:bb:b8:73:15:e8:49:5a:ef:8b:
20:0e:ca:1e:71:64:b2:2b:bc:83:d2:cf:98:51:f3:
e3:23:e8:e7:30:8c:fb:a0:8b:a7:63:39:41:ca:1f:
24:bf:bf:75:fe:75:20:aa:cf:78:d4:c3:10:29:51:
73:f5:1c:dc:3a:a4:17:4c:97:b3:95:b3:da:6a:e3:
a0:65:74:d9:5e:fd:e3:98:5d:88:d2:7d:17:42:45:
bf:38:ca:a3:8f:28:fe:e6:41:73:14:b8:75:7b:cb:
c1:9a:c0:1c:7b:c8:a8:30:4b:05:8d:fa:14:8f:9d:
43:63:14:9b:5b:a7:ce:79:7e:ff:19:32:df:c6:f1:
83:b7:7f:98:5a:9c:b8:50:0f:5c:27:ff:75:b2:ad:
6c:16:07:e7:41:14:15:48:ae:fc:7e:21:7a:ef:2b:
33:41:1c:7f:5e:16:cc:4b:83:be:73:a3:dd:f9:67:
98:45:8b:d2:79:42:a9:cd:ea:a6:1c:9a:56:48:63:
ae:1c:81:cc:1d:41:71:4f:98:4e:f0:d7:da:84:55:
82:a1:45:27:8a:76:a9:5e:e8:a9:fe:2c:1b:40:69:
6a:ab:7f:3c:57:85:08:c6:4f:f8:1c:df:70:a5:07:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:44:59:2C:7D:1B:27:B3:B9:FA:E4:22:A2:08:F4:A0:85:60:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/7688aa3b-864e-33e0-a87e-5dddae05198d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
X509v3 Authority Key Identifier:
keyid:AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f4ab::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:40:ee:9e:a8:e0:1a:c8:a4:9e:e5:b9:65:dd:03:fe:ef:a9:
04:f7:45:98:57:1a:d1:e1:c3:96:4f:df:c4:b4:4e:32:65:6a:
59:35:ab:bb:6e:c8:04:82:b7:5f:1b:f9:a7:69:bc:02:d8:b3:
07:b8:3b:f4:ba:5b:f9:26:7a:0d:6e:c9:32:b9:b4:0c:07:94:
ee:f9:8a:b5:a0:7a:50:2f:ae:39:f8:a7:3d:35:36:e7:0a:a6:
b3:b7:a4:47:ec:45:55:eb:e2:11:c9:7f:62:e7:e9:80:c8:70:
84:d3:05:46:4c:cf:a6:5b:f7:7e:e7:17:bf:db:8d:98:a7:c6:
9b:d7:2d:a2:2d:f1:9f:e1:ab:c1:c9:37:51:3a:f5:5c:9c:e0:
07:cc:13:e8:89:e9:32:0c:ac:cd:e3:79:e3:c6:1e:14:d1:e8:
b6:07:5c:1f:5f:aa:e4:55:67:6f:fb:3f:3f:1a:ba:ad:96:66:
2c:4a:9a:b7:23:ea:97:3a:cf:6d:c5:d3:cc:04:68:77:c5:b7:
f2:21:ea:9c:fa:28:78:d9:da:1e:82:d6:90:ca:7c:0f:d7:0c:
64:aa:16:01:ea:49:20:6d:6e:25:6c:98:11:d0:be:97:a7:74:
20:60:95:bb:af:62:9a:d3:f4:58:74:d6:35:01:18:ce:8e:db:
be:ea:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:15:38 2026 by rpki-client