
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
File: 9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa (raw, json)
Hash identifier: f2L2APlqPBmigoFjsVjFX9hRpRCGYght0NqjaD0qfJg=
Subject key identifier: 3F:B1:A1:4E:DD:D0:1B:3F:4E:9A:06:EF:2A:73:79:31:F8:6C:21:BF
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F4328584F497631B4F8C21B8168381700
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 2620:98:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:31:b4:f8:c2:1b:81:68:38:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b82f2d9d-bb5a-4cdb-841e-e12e677a727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:51:c0:9e:38:84:de:b5:c1:4a:10:8e:82:
2b:aa:20:9e:fe:b0:40:69:60:83:85:c4:e1:3f:65:
28:a4:5e:41:58:03:d3:13:bc:db:b6:4e:e8:f8:8e:
9b:68:b4:6a:51:35:20:30:5c:ed:fc:e7:e6:5c:8d:
74:3b:88:2a:ee:8c:94:c9:55:a0:4d:e2:f0:c0:4c:
13:a6:9b:1e:8b:4f:5b:29:4b:b8:d4:14:e7:db:a7:
3c:5d:c1:d3:1c:6a:21:5f:22:d3:eb:cf:97:a2:bb:
3a:4c:34:8c:28:f9:a2:10:c6:da:74:1b:9c:ce:3d:
30:90:9f:56:ca:f2:e6:98:05:6e:f4:ad:d2:8b:f1:
67:10:5c:45:a1:52:56:d0:30:d1:13:88:8b:7e:4b:
94:07:1f:18:9c:d2:ec:84:e8:cf:2e:64:d8:c8:3c:
35:76:40:2a:b9:fd:32:24:8b:81:69:17:da:90:e5:
b9:8c:89:a4:2a:6f:90:c3:0e:03:c0:dd:bb:bf:47:
d6:e9:9e:ab:a5:ac:a6:55:a0:d4:26:59:ad:17:a1:
90:8c:10:92:b9:9f:d6:7c:e6:70:97:4d:11:99:a6:
1b:90:00:35:f5:37:74:12:e7:d6:8a:c7:48:52:09:
9c:4a:83:a7:a1:b5:1e:8a:19:25:6d:ab:c4:8b:31:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:A1:4E:DD:D0:1B:3F:4E:9A:06:EF:2A:73:79:31:F8:6C:21:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:98:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:77:61:60:12:55:82:a7:23:27:b7:5b:49:1a:12:69:3a:ad:
5f:94:13:ba:0e:e4:cd:d1:6c:83:8c:8d:e6:ca:28:a4:85:78:
0e:ab:e5:5a:8c:ea:95:54:d4:2c:99:e3:4b:a6:09:91:a8:2e:
cc:24:9b:a0:95:e6:e8:d6:27:39:87:01:4b:9a:1d:20:93:f8:
67:56:e6:59:1a:64:d0:40:46:6c:6f:38:56:93:7b:1a:c9:83:
57:6e:18:f6:6f:81:97:22:28:19:df:cd:b2:a2:fd:60:6a:94:
c6:37:7a:41:5d:11:e0:95:ff:21:7a:72:d4:24:ad:01:e9:98:
9c:f2:dd:1b:0a:89:ec:bc:9a:ee:eb:0e:4f:e1:8a:06:f2:b7:
ba:f5:11:ec:64:b2:ed:2c:f4:5d:b3:4d:40:31:aa:21:4d:10:
9e:40:8b:4f:99:b2:08:c8:e2:43:9a:47:e7:ee:41:1f:1e:0c:
30:70:29:c0:2e:8f:c9:9b:8f:67:9b:8a:87:8f:da:32:25:92:
d3:ac:a7:5e:93:03:a2:2c:0a:f5:d5:fe:86:e1:bb:cd:d6:da:
68:e7:0a:bd:31:9b:9f:10:7d:42:b8:71:bd:83:d7:9e:67:81:
3e:b5:a1:5d:90:cd:5a:b3:a2:b0:86:ca:c7:46:b1:8f:1b:93:
e1:80:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:26:39 2026 by rpki-client