
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
File: 605c5576-b627-374c-935c-c768b229c9e4.roa (raw, json)
Hash identifier: Kpi1XsrUy8SsPPNZyj3f+cifnkD55PgRUi6sk+CYrLc=
Subject key identifier: 6D:47:76:6F:26:4A:11:87:8D:0C:71:BF:28:2E:47:C6:A5:26:33:C0
Certificate issuer: /CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
Certificate serial: 010D0C9F4328584F13023F16D00D0A09EE192540
Authority key identifier: 88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 12016
IP address blocks: 2620:db:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:3f:16:d0:0d:0a:09:ee:19:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38fff12-b069-4018-8acc-5d2d1323c6bf
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=6649ad49-e3ad-4da6-96bc-f18481410fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:bc:17:4c:16:ca:6b:b7:28:1c:30:e5:da:
09:16:14:88:fd:a5:32:fb:bb:f1:fe:10:b7:a2:16:
2f:22:1e:de:b9:48:fc:2e:91:5a:5d:24:3b:63:f3:
38:f1:72:80:25:4e:68:04:1c:f0:9c:45:98:78:d3:
bb:be:80:1e:19:da:6f:2b:9b:06:b0:ef:7f:a6:9a:
6f:3d:1f:fe:8a:d0:d9:6e:19:06:a2:71:3a:1d:0d:
da:73:60:8d:5c:30:2c:c3:26:9b:6d:0f:68:ce:58:
6f:51:e9:72:7d:75:27:5b:05:83:56:7b:19:93:3c:
e8:35:a6:52:33:7b:59:48:04:bb:d3:59:ec:9a:7b:
99:92:80:b5:05:f0:e0:a7:50:a6:16:02:65:9b:32:
6c:ca:61:f1:8e:d8:79:3b:53:8d:2e:b9:b5:f5:83:
72:f3:8b:52:0c:05:f5:ae:6b:2d:31:5a:10:ec:97:
e1:19:5b:75:23:4a:d0:78:a1:c2:1f:a0:b2:22:25:
ba:33:7f:0f:3b:84:90:f3:74:35:c2:0e:67:e7:16:
ab:0b:cb:80:6a:91:d3:cb:e0:c9:bf:fa:8e:f2:0d:
fd:4e:f2:ba:d0:74:a0:0d:3d:e5:a3:c2:36:ec:56:
ca:4c:de:a4:1f:70:7f:16:39:3d:b6:37:9d:21:fc:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:47:76:6F:26:4A:11:87:8D:0C:71:BF:28:2E:47:C6:A5:26:33:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl
X509v3 Authority Key Identifier:
keyid:88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:db:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:71:16:8d:8f:4a:0c:03:8b:fa:b6:c3:1b:47:92:5f:91:00:
3c:ee:01:d8:e1:43:0f:85:d7:b7:b6:9a:43:8c:d3:15:0f:6d:
4b:d7:18:92:be:34:39:9e:b3:ac:96:b9:7b:03:ba:19:33:bf:
04:3a:80:8c:98:42:51:42:9c:d6:bd:97:7a:d1:56:87:42:18:
5b:37:3d:a9:17:48:81:83:28:21:ee:f1:6e:2f:d9:a4:0d:c0:
c0:e1:dc:6f:6d:24:5c:a6:e3:23:6f:48:e5:6b:a1:63:ce:97:
4f:66:f2:5f:fc:17:6f:88:8b:9c:c6:3a:ed:bb:d6:68:2d:df:
65:7b:77:0a:61:5e:45:b7:25:9c:2c:60:cb:7d:0c:73:e5:82:
db:04:fc:c9:62:d0:46:e9:cb:84:88:50:a3:3a:7b:c3:80:1c:
9e:88:7f:b8:c7:d3:0e:67:bd:2b:6f:76:9d:db:9e:00:85:80:
ad:cb:57:3e:f4:77:ac:b4:65:f3:dc:7f:b6:55:88:4e:f5:c9:
46:de:3c:a1:b0:5a:af:be:cd:09:c2:20:6a:11:69:bd:56:7e:
5a:eb:5a:5c:d0:f8:57:45:6e:f0:4d:e4:dd:a9:4a:f1:dd:ae:
7c:bb:c8:5d:de:2a:39:6b:01:15:3b:12:4c:5d:a6:ab:41:13:
54:f3:d6:a8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAj8W0A0KCe4ZJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM4ZmZmMTItYjA2OS00MDE4LThhY2MtNWQyZDEzMjNj
NmJmMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
NjY0OWFkNDktZTNhZC00ZGE2LTk2YmMtZjE4NDgxNDEwZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDW8F0wWymu3KBww5doJFhSI/aUy+7vx/hC3
ohYvIh7euUj8LpFaXSQ7Y/M48XKAJU5oBBzwnEWYeNO7voAeGdpvK5sGsO9/pppv
PR/+itDZbhkGonE6HQ3ac2CNXDAswyabbQ9ozlhvUelyfXUnWwWDVnsZkzzoNaZS
M3tZSAS701nsmnuZkoC1BfDgp1CmFgJlmzJsymHxjth5O1ONLrm19YNy84tSDAX1
rmstMVoQ7JfhGVt1I0rQeKHCH6CyIiW6M38PO4SQ83Q1wg5n5xarC8uAapHTy+DJ
v/qO8g39TvK60HSgDT3lo8I27FbKTN6kH3B/Fjk9tjedIfzFZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG1Hdm8mShGHjQxxvyguR8alJjPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMzhm
ZmYxMi1iMDY5LTQwMTgtOGFjYy01ZDJkMTMyM2M2YmYvNjA1YzU1NzYtYjYyNy0z
NzRjLTkzNWMtYzc2OGIyMjljOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTM4ZmZmMTItYjA2OS00MDE4LThh
Y2MtNWQyZDEzMjNjNmJmL2UzOGZmZjEyLWIwNjktNDAxOC04YWNjLTVkMmQxMzIz
YzZiZi5jcmwwHwYDVR0jBBgwFoAUiIEt38xU/8AVR0uEi8tMUXmQV3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lMzhmZmYxMi1iMDY5LTQwMTgtOGFjYy01ZDJk
MTMyM2M2YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2+AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAApxFo2PSgwDi/q2wxtHkl+RADzuAdjhQw+F17e2mkOM0xUPbUvX
GJK+NDmes6yWuXsDuhkzvwQ6gIyYQlFCnNa9l3rRVodCGFs3PakXSIGDKCHu8W4v
2aQNwMDh3G9tJFym4yNvSOVroWPOl09m8l/8F2+Ii5zGOu271mgt32V7dwphXkW3
JZwsYMt9DHPlgtsE/Mli0Ebpy4SIUKM6e8OAHJ6If7jH0w5nvStvdp3bngCFgK3L
Vz70d6y0ZfPcf7ZViE71yUbePKGwWq++zQnCIGoRab1WflrrWlzQ+FdFbvBN5N2p
SvHdrny7yF3eKjlrARU7EkxdpqtBE1Tz1qg=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:57 2026 by rpki-client