
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
File: 3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa (raw, json)
Hash identifier: Z9pcB3UMKU+ZmspWCcarv0B4XHi8eSyo0mTA5oWyces=
Subject key identifier: 2C:B3:96:73:EE:D3:0F:69:FB:36:6F:73:9C:C9:9B:B5:A5:58:2A:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F498449A9B6096B8495430200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2600:1402:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:49:a9:b6:09:6b:84:95:43:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a9dc2a82-ecd2-4f6d-b51e-9d55453e0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:99:8f:ac:92:5f:de:b1:e5:66:3d:47:6b:
0a:b8:0d:a5:51:17:0e:90:3a:c6:75:e4:c3:55:eb:
54:c2:44:3d:d6:3e:f1:b3:43:c6:fe:d2:4e:f3:0d:
42:46:20:d6:fa:47:06:5b:fa:92:98:7d:cf:3e:31:
12:73:a1:27:28:bd:cb:57:26:ce:51:6a:f3:bd:02:
6f:9e:b7:dc:a5:db:17:3b:e5:34:a0:1b:9a:d9:1b:
ea:e7:23:a3:a8:41:f3:44:d4:44:48:d3:52:fa:68:
21:61:78:cf:33:48:22:a9:f0:72:44:7c:dd:d0:e3:
4c:b0:0b:7a:bd:31:4e:0d:69:14:54:23:00:44:4a:
a4:bc:46:5c:0d:31:1d:61:fd:97:48:7b:47:c1:1c:
ba:ba:e9:8a:a0:44:30:b4:b9:69:eb:d4:c2:02:9e:
42:c5:a5:71:55:26:d6:25:fe:75:3f:c0:ee:3d:1d:
a2:2f:67:bf:ce:6c:f0:de:59:1f:a9:88:f9:29:71:
a3:a9:bd:fb:1b:3b:88:01:f2:d9:fb:76:14:ca:47:
9f:67:4c:bd:27:af:eb:d0:ed:d6:46:98:40:35:a2:
2d:10:90:e9:87:96:87:c4:46:22:a1:4a:f8:d9:31:
0e:7d:ff:00:17:bc:87:15:0e:83:3f:53:43:93:52:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:96:73:EE:D3:0F:69:FB:36:6F:73:9C:C9:9B:B5:A5:58:2A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1402:19::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:45:78:bf:01:79:20:9e:83:0a:db:ad:df:e8:0a:bb:b6:5a:
03:b7:68:27:e9:94:7a:a2:ba:56:5a:1f:47:40:3c:d5:35:67:
e9:f4:78:2f:1c:9e:e1:31:56:d6:53:6f:61:3f:02:9d:ac:7f:
72:ac:02:d5:e5:59:88:2d:a8:35:b3:ff:f8:2c:2f:07:34:fe:
88:71:a3:14:13:29:ec:ad:e0:dc:fb:c7:6d:ac:c2:e0:e5:7d:
66:10:c7:2e:fa:63:f6:5c:ff:b4:f1:39:ed:c4:a7:ca:5e:71:
31:ec:8f:03:a9:dd:17:54:ed:a9:6a:4e:28:3f:8b:c1:f4:b3:
26:29:da:bd:85:63:89:64:b1:f2:0f:06:4d:25:f3:de:b9:c7:
00:a5:c2:35:21:c6:e6:c0:e8:7e:ad:f0:b2:1f:42:a4:22:2c:
d5:9b:55:4b:3e:79:98:9d:0c:12:0b:6e:88:d4:95:01:25:3e:
b9:e8:08:e9:8b:99:ca:86:9d:44:34:5c:74:6a:e9:af:13:51:
be:67:63:58:93:71:20:ab:9a:c4:dc:30:d4:1e:41:f9:c2:b3:
e7:85:97:b4:9a:d7:c4:cc:46:0b:06:a7:8f:b9:8b:9a:05:cd:
7a:3f:ec:56:aa:ac:5e:bb:d1:be:6b:89:f1:3e:b7:fb:60:fd:
5d:23:d2:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhEmptglrhJVDAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTlkYzJhODItZWNkMi00ZjZkLWI1MWUtOWQ1NTQ1M2UwYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr52Zj6ySX96x5WY9R2sKuA2lURcOkDrGdeTD
VetUwkQ91j7xs0PG/tJO8w1CRiDW+kcGW/qSmH3PPjESc6EnKL3LVybOUWrzvQJv
nrfcpdsXO+U0oBua2Rvq5yOjqEHzRNRESNNS+mghYXjPM0giqfByRHzd0ONMsAt6
vTFODWkUVCMAREqkvEZcDTEdYf2XSHtHwRy6uumKoEQwtLlp69TCAp5CxaVxVSbW
Jf51P8DuPR2iL2e/zmzw3lkfqYj5KXGjqb37GzuIAfLZ+3YUykefZ0y9J6/r0O3W
RphANaItEJDph5aHxEYioUr42TEOff8AF7yHFQ6DP1NDk1J1EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCyzlnPu0w9p+zZvc5zJm7WlWCo4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M5ZmEyYTItYzMxNy0z
MTdiLTg3MTItZjFlMWI0N2M1YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAgAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFpFeL8BeSCegwrbrd/oCru2WgO3aCfplHqiulZaH0dAPNU1Z+n0
eC8cnuExVtZTb2E/Ap2sf3KsAtXlWYgtqDWz//gsLwc0/ohxoxQTKeyt4Nz7x22s
wuDlfWYQxy76Y/Zc/7TxOe3Ep8pecTHsjwOp3RdU7alqTig/i8H0syYp2r2FY4lk
sfIPBk0l8965xwClwjUhxubA6H6t8LIfQqQiLNWbVUs+eZidDBILbojUlQElPrno
COmLmcqGnUQ0XHRq6a8TUb5nY1iTcSCrmsTcMNQeQfnCs+eFl7Sa18TMRgsGp4+5
i5oFzXo/7FaqrF670b5rifE+t/tg/V0j0q8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:15:08 2026 by rpki-client