
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
File: ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa (raw, json)
Hash identifier: L3Vyk+m4FkdlR2hx6JtQrcVfIx7vB1O6YOuDv5HRz+Q=
Subject key identifier: 79:FE:E8:18:11:80:B5:57:E3:C2:0F:EB:FA:3D:E5:74:80:AA:68:CF
Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial: 010D0C9F4328584F57682F3E30D35CA6B90AF900
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 4473
IP address blocks: 2607:9bc0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:2f:3e:30:d3:5c:a6:b9:0a:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=54572470-4956-4793-b097-7075044fdaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:9a:a0:d7:8c:c1:44:ea:53:ff:3c:7a:3d:
c3:2b:ee:86:5c:9f:52:de:a0:cc:f4:d2:96:25:00:
64:29:58:8b:d7:bb:0d:5a:19:e4:0f:42:a1:a3:46:
0d:c9:19:4e:e9:99:fa:a8:8a:2e:75:85:94:7c:0f:
74:fd:0c:c9:9f:ed:30:91:16:5a:5c:01:20:51:5c:
57:e3:f1:ee:2a:76:66:a5:ab:c3:0c:e6:5f:34:6d:
40:a9:35:d2:63:34:df:d5:cd:58:09:35:cb:7d:75:
5b:dc:21:e0:9a:0d:fa:16:31:e1:e9:72:09:b4:8d:
92:70:9e:7b:41:36:3e:8f:47:64:fa:bc:c1:8d:b8:
35:5a:71:67:60:ce:53:30:99:5c:b4:07:19:fa:a0:
f8:a2:1b:a7:78:df:be:d7:38:07:ea:e2:dc:34:96:
fd:ed:4b:66:6b:f9:f2:29:86:c2:e2:7b:28:d0:46:
19:dd:17:e7:5a:b1:43:73:a6:5a:2b:d4:a9:15:3e:
a7:a9:27:50:9e:be:e7:4d:72:ee:57:4c:8e:f1:dd:
5a:4b:d1:a1:e4:c9:df:bd:2f:cd:da:02:ba:39:23:
06:8f:c5:c4:58:d3:1f:88:65:34:5f:86:76:86:5c:
b9:da:8c:73:4b:70:f0:e7:71:a5:f1:fa:6f:c6:df:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:E8:18:11:80:B5:57:E3:C2:0F:EB:FA:3D:E5:74:80:AA:68:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
X509v3 Authority Key Identifier:
keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9bc0:1020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1f:11:89:e2:4b:94:95:66:ed:b7:b2:46:7a:64:69:64:6e:
1c:a1:38:4d:a7:65:a9:5b:a6:27:64:1e:48:21:ec:c8:bf:05:
ff:d3:0f:5f:9b:e4:4e:74:7d:b1:f8:07:f8:c2:36:f4:e9:d0:
d0:3b:9c:0a:2c:02:d0:e9:ec:be:bc:df:69:ff:4a:5c:3a:31:
69:c5:d6:ed:d0:60:a4:3d:8f:c6:1e:5a:75:90:7e:9c:56:db:
2d:b8:be:1d:b1:43:95:a0:f9:ee:77:a0:d7:58:31:5e:6b:90:
ca:5b:6f:2a:6a:db:c9:21:9a:68:6f:2d:b1:02:24:2d:e0:af:
42:92:70:4b:2d:80:17:ac:5e:06:08:59:cb:cf:40:b6:ed:52:
ed:d8:f6:57:03:95:e4:f2:13:5e:19:2b:87:90:f0:9a:90:e6:
d5:42:81:a5:8d:e1:0a:f1:bf:b5:3b:44:bc:f8:b7:76:f1:80:
03:47:e7:88:c6:4a:bb:f8:67:6a:a0:40:3d:25:8e:8e:69:5b:
63:4d:45:ba:64:aa:ce:8d:a9:2d:58:13:02:b8:85:75:02:65:
c9:31:36:16:c9:56:17:62:e6:80:c8:24:ae:d2:54:16:37:93:
58:37:25:2e:d9:bf:92:80:3a:3b:ef:56:f9:2c:e5:59:08:3a:
d9:f5:55:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaC8+MNNcprkK+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx
MzBlMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NTQ1NzI0NzAtNDk1Ni00NzkzLWIwOTctNzA3NTA0NGZkYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2aoNeMwUTqU/88ej3DK+6GXJ9S3qDM9NKW
JQBkKViL17sNWhnkD0Kho0YNyRlO6Zn6qIoudYWUfA90/QzJn+0wkRZaXAEgUVxX
4/HuKnZmpavDDOZfNG1AqTXSYzTf1c1YCTXLfXVb3CHgmg36FjHh6XIJtI2ScJ57
QTY+j0dk+rzBjbg1WnFnYM5TMJlctAcZ+qD4ohuneN++1zgH6uLcNJb97Utma/ny
KYbC4nso0EYZ3RfnWrFDc6ZaK9SpFT6nqSdQnr7nTXLuV0yO8d1aS9Gh5MnfvS/N
2gK6OSMGj8XEWNMfiGU0X4Z2hly52oxzS3Dw53Gl8fpvxt/8XQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHn+6BgRgLVX48IP6/o95XSAqmjPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh
OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvY2E4ODliOTMtYTNmNy0z
YWY0LWI3Y2UtMzFhYzI3ZjhmZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw
MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3
MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0
MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHcfEYniS5SVZu23skZ6ZGlkbhyhOE2nZalbpidkHkgh7Mi/Bf/T
D1+b5E50fbH4B/jCNvTp0NA7nAosAtDp7L6832n/Slw6MWnF1u3QYKQ9j8YeWnWQ
fpxW2y24vh2xQ5Wg+e53oNdYMV5rkMpbbypq28khmmhvLbECJC3gr0KScEstgBes
XgYIWcvPQLbtUu3Y9lcDleTyE14ZK4eQ8JqQ5tVCgaWN4Qrxv7U7RLz4t3bxgANH
54jGSrv4Z2qgQD0ljo5pW2NNRbpkqs6NqS1YEwK4hXUCZckxNhbJVhdi5oDIJK7S
VBY3k1g3JS7Zv5KAOjvvVvks5VkIOtn1VbM=
-----END CERTIFICATE-----
Generated at Sun Oct 4 14:10:12 2026 by rpki-client