
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2f3d48cb-3b4f-3231-9607-2dba6713accf.roa
File: 2f3d48cb-3b4f-3231-9607-2dba6713accf.roa (raw, json)
Hash identifier: wJ2e7yQUOLoxylPwtud0Lcs27oY+4fbX5IovXV024aU=
Subject key identifier: 3E:F4:96:8A:6B:61:AE:29:C3:39:BB:DC:B8:A8:53:7B:25:44:7E:43
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584FB0BDDB2EAD0658B75BAB4F4A
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2f3d48cb-3b4f-3231-9607-2dba6713accf.roa
Signing time: Sun 01 Nov 2026 01:00:13 +0000
ROA not before: Sun 01 Nov 2026 01:00:13 +0000
ROA not after: Sat 30 Jan 2027 02:00:13 +0000
asID: 36692
IP address blocks: 2620:119:fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b0:bd:db:2e:ad:06:58:b7:5b:ab:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Nov 1 01:00:13 2026 GMT
Not After : Jan 30 02:00:13 2027 GMT
Subject: CN=d1aec8fc-7c9f-4758-b2f2-c65450a2a957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:92:e1:92:28:5d:03:d1:e9:90:70:43:e9:
73:30:80:55:1e:98:ff:2b:71:03:28:65:0f:d1:71:
e0:e4:39:89:b0:c7:f1:21:9c:43:f6:78:98:a7:15:
2d:18:7f:8f:8a:ff:a0:52:8e:f6:ee:ac:77:96:1e:
57:98:89:09:23:52:d6:4e:fa:07:43:64:ef:f0:ff:
e6:df:a0:86:a9:c9:64:48:b4:c7:30:66:23:c7:08:
70:a5:de:63:b6:b7:2d:e0:1e:90:73:e5:ad:a5:fe:
f6:51:46:e1:21:17:60:06:3e:91:70:aa:c9:dc:7c:
fa:62:a3:99:c6:f4:05:3c:4b:86:6f:6b:db:3e:9d:
62:7e:e6:11:30:9a:88:08:0d:d8:9b:fe:3b:17:4e:
b7:10:b2:b1:d2:cb:c9:04:94:68:6d:f0:52:a4:07:
af:12:06:a4:e7:26:1a:93:53:2b:4b:5b:b0:b9:03:
9a:bd:5f:ac:3a:9a:13:94:7f:46:bf:a3:54:95:b1:
7c:36:87:41:f0:09:79:d7:ce:05:7c:ab:8e:03:41:
fd:cc:20:c5:05:01:c8:57:92:b1:c1:d2:12:a3:58:
53:dd:a5:b4:2b:9c:ca:2d:2e:0c:6f:67:01:8a:39:
49:7d:2b:64:f3:c8:55:55:22:4e:c4:29:ae:56:72:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:96:8A:6B:61:AE:29:C3:39:BB:DC:B8:A8:53:7B:25:44:7E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2f3d48cb-3b4f-3231-9607-2dba6713accf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:119:fa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:01:d9:59:f9:de:30:6c:0f:ec:ab:4e:48:cf:af:24:e9:6e:
e5:49:14:00:42:2f:2c:fa:51:b8:2e:27:4f:27:13:ab:66:57:
20:27:b8:fd:06:b4:48:57:db:03:c1:2f:0f:64:72:46:79:69:
40:a4:6a:b7:0d:a9:5a:47:a1:d9:2d:fd:09:cd:f2:ab:9e:b6:
6c:00:ff:e9:d7:6b:e3:cd:96:df:39:cf:be:c6:76:3b:12:75:
d1:60:17:0f:4d:46:8a:84:0b:6b:81:0f:fb:c4:78:83:c5:2d:
71:66:1d:07:df:85:ba:9b:51:af:c6:c5:93:84:b8:79:08:4e:
31:a2:5d:e7:9f:37:0c:54:78:0e:16:a3:e1:0c:b0:26:3d:c5:
28:79:4e:79:41:a6:c9:db:b2:de:4b:4e:c1:b5:5a:ac:cd:fc:
6c:ec:94:de:8c:d6:35:32:51:73:94:cc:63:93:c5:85:e0:8b:
0c:23:fc:29:cd:87:0a:be:b9:5f:d5:6a:b8:2e:74:6f:59:ca:
6c:d2:3c:18:0e:d8:c7:dc:89:11:4f:32:00:ad:a7:30:72:d7:
a0:f3:e1:bc:19:26:70:13:6f:26:2b:27:14:b2:07:0a:f8:7d:
80:64:c0:57:78:d3:1b:9a:2a:7f:9e:8a:b0:bd:e1:04:65:4c:
28:c4:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:05:02 2026 by rpki-client