
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa
File: 20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json)
Hash identifier: Qb8sNY9sLWtA8JBqkiqM6VoXbgeMD6esj/PLkZW+z+w=
Subject key identifier: 66:9F:20:10:13:79:8F:24:3F:41:B8:D9:98:EC:6F:F5:13:0D:40:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F49845B4F0C842E85EBBDAE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2600:1406:2e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:5b:4f:0c:84:2e:85:eb:bd:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=49e09996-bf75-41d0-a818-ac02848c6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:a8:84:05:3b:b1:c9:ad:3a:58:bb:db:24:
bc:95:32:94:b4:a1:ba:f3:33:02:54:2c:07:04:91:
20:ee:1b:95:0f:ec:2a:78:5c:9a:13:57:78:d7:1e:
67:14:f5:7f:6a:ee:a1:23:cb:66:61:56:54:c1:64:
70:90:a0:10:1d:75:6a:22:f3:72:1b:eb:32:e7:52:
aa:8b:40:7b:07:d5:51:ce:62:e3:9b:a6:19:22:92:
01:eb:ca:62:08:d2:f2:42:e1:af:93:b8:f4:f2:89:
d6:07:32:d8:10:ac:d7:53:ed:6b:f6:e7:02:f9:89:
02:5c:19:3a:7d:5c:ed:2c:6e:ac:5e:21:4a:43:03:
b6:d0:bd:92:ab:bc:22:70:51:a4:42:39:dc:82:54:
50:95:b3:ca:02:d6:82:d0:53:43:f4:d4:bd:f2:d4:
06:81:ec:c6:0a:2f:37:b3:ce:0e:d6:91:79:ec:c4:
53:f2:b6:52:fe:46:8a:b4:24:b1:70:e5:3c:39:ce:
6c:81:28:5e:c5:ab:bc:5c:d3:b7:b1:62:f2:e3:23:
39:45:81:7c:bd:e9:ec:fe:bb:cc:7b:b0:c8:ed:b0:
31:74:a6:34:bf:e5:07:fe:0b:3f:03:a1:50:6c:8a:
e4:d0:59:86:93:c2:7d:3d:06:4b:8d:ab:c3:0b:ef:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:20:10:13:79:8F:24:3F:41:B8:D9:98:EC:6F:F5:13:0D:40:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1406:2e00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:53:25:67:1b:33:05:98:4b:78:ab:af:32:3f:c5:67:8f:f8:
21:17:eb:3c:c4:b8:9d:a5:03:1a:a1:36:14:33:b1:92:ec:95:
c2:83:1b:03:02:57:36:72:ad:10:9f:01:56:ab:7f:f0:7b:1b:
f9:ee:57:15:a9:19:95:1d:ba:31:ae:59:91:7a:b1:b2:c1:59:
96:cd:62:fb:f0:1d:23:09:be:85:63:d9:d2:e9:75:b5:dc:a5:
f4:a2:91:ce:10:ad:5e:c8:6e:09:77:cc:8b:49:12:29:52:e0:
62:77:07:c2:20:8c:60:95:9d:66:3e:b5:c3:c8:11:05:96:7d:
0c:e8:dd:f9:9d:bb:be:85:1e:32:db:17:af:aa:8e:1f:67:5a:
c4:c0:a6:fe:60:d9:94:24:7d:4c:cc:1d:e7:82:77:c4:6d:17:
bd:fc:0d:2b:6c:82:fc:47:1b:0d:d2:1b:b3:5f:38:cb:97:e2:
0e:29:2c:3f:22:dd:c9:97:52:11:d1:a7:a2:73:e8:6b:41:4d:
2e:6b:22:47:45:ca:a2:9d:a6:a4:6e:46:78:be:29:21:2a:d0:
22:6d:3b:13:f5:7d:ff:f2:d9:31:0f:7c:3c:d9:0e:f3:14:fc:
ee:35:9e:be:57:f4:d5:26:98:5f:4c:fb:95:93:fa:58:6f:4c:
0d:11:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:51:44 2026 by rpki-client