
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa
File: ddf1cf92-dff2-35a5-9ded-84719579877e.roa (raw, json)
Hash identifier: v9kjMbUHLVuDso00I9sIhTYq2U80JbpNAwN/kYx8YcM=
Subject key identifier: B3:30:E2:96:4B:94:8F:88:B9:F3:54:8C:EA:70:D4:E3:F0:D7:1E:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EE0C1EE978EBFAAC7BC6B5280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 12222
IP address blocks: 2001:4878:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:ee:97:8e:bf:aa:c7:bc:6b:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=f891b0be-100b-43bd-a5ff-867aec7e4323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:55:9b:0f:03:40:8a:52:e2:04:8c:78:04:
83:fb:bc:a8:cd:10:3e:05:96:8f:50:ab:db:38:37:
55:d4:9b:ed:61:f6:e6:db:cc:24:07:f1:d9:0a:0d:
a7:37:7b:6e:d5:b0:bf:02:45:63:e8:a3:3d:22:19:
46:e0:1c:66:99:38:e8:df:6f:40:c8:78:ee:4b:d4:
45:98:27:17:b7:ca:7e:b8:5f:53:3e:19:4d:a2:25:
1b:9a:a9:01:a3:16:72:85:27:c0:93:02:0c:de:41:
20:c6:20:26:b4:05:ad:62:d9:89:61:55:81:b3:7d:
27:98:21:14:9b:dd:84:44:21:ae:c1:f3:94:25:5e:
89:f8:63:66:89:cf:47:6c:ff:56:d1:a5:ac:58:93:
0b:31:09:97:17:84:78:c6:fc:66:da:a9:5a:de:fe:
dd:77:05:b6:ba:7a:e0:20:6d:92:94:e6:d9:18:8b:
01:65:f2:7f:0f:19:02:bb:be:e4:ea:bb:5a:51:d5:
b8:74:03:86:db:a8:95:d2:00:41:43:95:94:31:c2:
ce:5b:33:a1:e7:5c:80:88:8e:a3:bc:7d:75:4b:91:
f0:b9:21:44:f6:f1:c4:b5:7d:1e:60:be:1c:b6:10:
c8:75:36:a4:74:2b:ca:9b:27:35:29:b7:e2:5e:70:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:E2:96:4B:94:8F:88:B9:F3:54:8C:EA:70:D4:E3:F0:D7:1E:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:103::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:08:f9:c1:84:55:d9:aa:80:e2:3e:2a:6b:31:a6:80:9c:4a:
75:0b:bf:93:64:c7:83:14:5e:c9:40:b0:60:df:cd:0d:e5:bb:
57:65:08:de:89:db:1e:b6:86:cf:4e:d3:7a:37:2e:79:10:5e:
58:63:88:08:7a:67:6b:e7:f3:18:71:8b:e2:5a:76:01:62:d6:
a9:8f:5a:cd:7b:bf:b9:24:d7:e2:10:04:ac:89:00:82:81:5b:
3c:31:24:01:22:19:1d:a9:64:d2:d8:8e:5c:ea:0a:73:e3:c5:
8f:73:7e:89:9e:cd:4c:35:48:00:91:30:5b:6b:a7:b6:2d:c6:
08:1f:4d:92:95:4b:28:c6:3a:a0:28:53:5d:e7:a6:d2:91:a3:
e8:54:e9:24:40:b5:58:4a:87:13:71:ee:93:35:61:14:ea:dc:
06:4a:f6:93:92:76:38:1d:b2:43:b7:17:ce:33:d7:46:8e:ce:
e6:66:41:2d:4b:10:76:b7:45:35:13:78:fd:73:58:c8:81:05:
82:e6:90:6c:18:d4:2f:26:14:2a:a6:a1:67:30:5b:74:b9:3e:
7b:7a:25:4c:f5:ed:99:5f:42:48:a5:7e:c5:6a:29:ec:fd:3a:
94:5d:49:1d:18:70:6d:b4:d6:b4:bd:51:63:5c:26:06:cc:d4:
ef:b0:2b:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7gwe6Xjr+qx7xrUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
Zjg5MWIwYmUtMTAwYi00M2JkLWE1ZmYtODY3YWVjN2U0MzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl1Vmw8DQIpS4gSMeASD+7yozRA+BZaPUKvb
ODdV1JvtYfbm28wkB/HZCg2nN3tu1bC/AkVj6KM9IhlG4BxmmTjo329AyHjuS9RF
mCcXt8p+uF9TPhlNoiUbmqkBoxZyhSfAkwIM3kEgxiAmtAWtYtmJYVWBs30nmCEU
m92ERCGuwfOUJV6J+GNmic9HbP9W0aWsWJMLMQmXF4R4xvxm2qla3v7ddwW2unrg
IG2SlObZGIsBZfJ/DxkCu77k6rtaUdW4dAOG26iV0gBBQ5WUMcLOWzOh51yAiI6j
vH11S5HwuSFE9vHEtX0eYL4cthDIdTakdCvKmyc1KbfiXnCQ0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLMw4pZLlI+IufNUjOpw1OPw1x7NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmMWNmOTItZGZmMi0z
NWE1LTlkZWQtODQ3MTk1Nzk4NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADMI+cGEVdmqgOI+KmsxpoCcSnULv5Nkx4MUXslAsGDfzQ3lu1dl
CN6J2x62hs9O03o3LnkQXlhjiAh6Z2vn8xhxi+JadgFi1qmPWs17v7kk1+IQBKyJ
AIKBWzwxJAEiGR2pZNLYjlzqCnPjxY9zfomezUw1SACRMFtrp7YtxggfTZKVSyjG
OqAoU13nptKRo+hU6SRAtVhKhxNx7pM1YRTq3AZK9pOSdjgdskO3F84z10aOzuZm
QS1LEHa3RTUTeP1zWMiBBYLmkGwY1C8mFCqmoWcwW3S5Pnt6JUz17ZlfQkilfsVq
Kez9OpRdSR0YcG201rS9UWNcJgbM1O+wK3Y=
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:55:36 2026 by rpki-client