
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa
File: 46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa (raw, json)
Hash identifier: Wa8ADos700WPsimbsn9TU/1XNWmWNxGXlh+bbWPNstA=
Subject key identifier: F9:A3:34:7A:B3:85:0D:A1:EC:6D:FB:3E:D0:AE:AB:79:58:0D:27:D2
Certificate issuer: /CN=1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3
Certificate serial: 010D0C9F4328584F49755FEB0833D5AC5C8B9CC0
Authority key identifier: F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15199
IP address blocks: 2620:b8:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:5f:eb:08:33:d5:ac:5c:8b:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=eb59fecb-6473-4cff-b094-fe773811d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:e6:a6:9f:0f:25:3a:15:f8:db:71:40:07:
d2:6b:40:ee:27:00:7e:3f:c9:05:29:7f:b4:f5:ec:
d1:25:04:f4:a2:2f:64:67:46:e5:b1:a3:5c:01:c2:
01:df:0f:16:0e:e9:a4:8a:10:7b:2d:15:79:af:c3:
a4:8c:27:4e:06:c0:c1:da:89:6a:6d:fb:82:9f:ac:
0a:98:b5:8f:73:88:0c:08:2c:ff:f4:d0:ee:9e:17:
6a:87:d5:ee:8b:6e:30:ac:5b:14:95:e9:0c:7d:1e:
f4:b5:81:70:25:7c:0d:07:5e:ca:1e:19:cd:2a:1d:
fa:56:a6:93:50:a6:7a:b7:ea:6a:fd:fb:67:b3:b6:
bf:a8:10:8f:05:8f:63:71:b5:6c:51:ca:2d:66:83:
92:cf:96:0d:dd:21:86:15:20:89:2e:be:34:5a:b7:
dd:bd:81:45:ce:fc:a2:ba:18:47:df:c8:18:07:38:
45:1e:4c:75:d1:d1:69:f6:2e:d8:b2:c8:88:5e:ea:
39:56:a4:71:4f:0d:f8:2c:64:ce:01:dc:f5:a9:a9:
aa:c5:fa:da:f2:6f:22:aa:9e:6a:16:c6:ca:3e:33:
b2:96:25:e0:05:b5:cf:98:d4:26:d2:6a:68:8c:5c:
0b:a4:94:bc:e3:05:c1:f8:50:a0:73:14:63:04:d1:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:34:7A:B3:85:0D:A1:EC:6D:FB:3E:D0:AE:AB:79:58:0D:27:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.crl
X509v3 Authority Key Identifier:
keyid:F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:b8:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:76:49:9a:52:54:06:c9:4e:21:1c:44:a6:39:1b:e7:6d:e9:
46:45:59:36:2c:53:9f:b3:27:84:1e:91:a2:74:25:2b:c2:f1:
6f:8a:38:a6:04:61:6c:a4:be:db:bd:fa:56:2b:6b:b9:e3:26:
78:a8:36:20:f8:de:28:ce:40:b1:4b:6d:62:d8:f9:76:35:5d:
ed:45:0e:f0:80:30:49:49:e4:73:13:6a:47:01:01:b0:56:dd:
b6:ec:15:9f:77:c1:d8:e5:6e:02:fb:d9:46:e1:51:73:4e:a3:
01:a2:9a:43:4d:3e:0b:04:63:1c:89:fb:af:db:5e:c0:9a:3c:
f2:44:f9:c2:97:53:54:5b:80:f8:15:01:90:16:c2:6d:b8:25:
87:a4:0c:9d:d9:9b:2d:5a:30:fa:42:87:d8:ac:ef:34:b4:6b:
28:ba:33:73:80:92:33:9b:b1:d1:de:97:e4:06:ec:0f:2f:71:
fc:59:34:7a:6a:b9:bc:b6:8b:d3:67:55:68:1c:87:83:7b:63:
e8:44:66:50:aa:a0:1f:6b:18:4f:f2:c9:ca:9a:db:d8:ea:d1:
cb:4e:98:47:3c:fc:08:ad:af:16:56:96:f0:b9:a7:fa:78:f9:
24:ca:56:4d:11:fe:82:16:70:24:bb:40:fb:fb:05:b1:36:7e:
aa:a5:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:26:53 2026 by rpki-client