
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa
File: a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa (raw, json)
Hash identifier: 7gRXLlZnuzQJbqzkcvBOBlbTc/Lnia+cMGMC8mIyumI=
Subject key identifier: 49:8A:70:92:B6:5F:13:6D:F2:EE:7F:4B:C6:E0:A1:77:5A:52:67:3A
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328584F4973E605D00B6E1691E37557
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 2606:dc00:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:e6:05:d0:0b:6e:16:91:e3:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=591b61a8-b542-4349-9a05-5c4d35052603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:a6:96:99:51:25:07:95:69:39:f4:f5:c9:
03:91:d4:d7:9f:ae:69:0d:e5:1d:06:c7:4b:20:63:
13:44:dd:96:70:d3:61:f6:53:c6:8b:d1:f3:1a:1b:
25:a8:fd:99:0c:c5:c1:ab:2b:b2:a9:f0:fd:6f:81:
ea:16:23:e8:61:e2:fc:2f:19:22:91:ea:ff:a2:7b:
e0:e0:08:b5:c1:e3:e5:01:4a:90:8e:67:2a:f0:96:
cb:0c:83:fd:eb:84:f3:93:6b:b6:90:7a:d5:ac:10:
5f:f3:f9:e5:ef:48:82:a2:e8:d3:b0:a6:a3:73:46:
73:bf:a8:92:1e:a0:15:42:d9:f6:5a:18:1b:24:45:
5c:18:8f:f1:e5:08:1b:22:ca:7d:bf:b4:a2:ed:61:
df:ee:6b:c5:2f:56:e1:9b:b9:42:fb:5c:93:b1:ae:
c3:0e:50:76:82:ce:f2:1a:8c:fd:b9:65:85:57:d1:
6b:47:6f:f6:f6:bf:09:c1:70:fc:da:8a:4d:ed:d6:
86:9c:dd:a4:df:39:44:a6:a0:51:38:dd:6a:b4:7e:
2b:a1:99:2f:c1:6d:00:88:27:79:4f:0c:f8:8c:24:
93:2c:a5:04:fd:fe:bb:e7:90:68:b2:c0:88:6c:f1:
82:bd:29:4b:cf:54:a8:ad:bc:7b:6a:20:e0:ee:6d:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:70:92:B6:5F:13:6D:F2:EE:7F:4B:C6:E0:A1:77:5A:52:67:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:dc00:ff00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:4a:a5:7d:f4:b8:a3:d9:a0:43:87:4e:61:0e:80:f0:3a:a9:
5b:6f:1d:54:15:1c:e5:7c:7d:4f:23:e1:c3:75:dd:34:95:70:
8d:73:a2:eb:48:de:5c:83:f8:b0:ff:dd:44:03:b4:ea:6d:95:
90:f7:9e:3c:ae:5f:e2:98:2c:6a:ce:ef:c0:b3:ae:72:53:6b:
43:b9:56:a5:ca:ef:e4:68:e6:4d:b6:d2:c4:79:2f:3f:0b:00:
f2:b2:13:56:a9:af:da:f9:bf:36:55:9f:2f:bb:19:fd:08:10:
88:36:78:3e:ef:14:f1:9a:75:ea:e9:d7:60:88:7d:a9:ef:0a:
7a:bc:03:94:3f:e4:fc:e7:8f:89:a7:ca:7e:c2:44:a9:a8:0c:
17:63:f7:ba:c6:71:72:1d:d6:3b:b2:e7:7f:4a:51:6d:05:f4:
3d:b6:f5:d3:e4:42:70:2d:ba:72:2f:71:af:29:57:bb:14:73:
4b:13:54:4e:28:95:5a:40:b1:c0:61:44:ed:4d:5d:61:f7:4b:
7f:b5:22:53:a0:63:e6:a2:e7:61:9e:83:b2:5a:90:cf:ae:72:
d5:14:b2:d7:34:98:04:4a:af:01:08:ca:2f:cf:b2:ac:a4:33:
7b:cd:0f:5b:15:57:aa:17:24:f6:72:b1:2e:b6:9b:93:8b:83:
0d:bc:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:03 2026 by rpki-client