
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
File: 1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa (raw, json)
Hash identifier: GlLhIAD8W2V0mRzapN508FDsBeCe/195pDHJb3u1eE0=
Subject key identifier: 60:16:6D:73:76:B7:29:A0:16:2C:13:7D:43:22:94:B1:DC:0F:E6:C9
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584F2957AC70E14CF9959BBF33C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 16509
IP address blocks: 2620:147:c42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:ac:70:e1:4c:f9:95:9b:bf:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=0e4f7a9c-53db-4e30-b7cb-a03c24344796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:6c:35:3b:34:49:b0:c3:77:b8:c6:a1:2b:
7e:be:a5:a9:3f:38:3e:8e:cc:e7:97:32:86:8a:93:
da:fb:a4:81:8b:8f:79:20:84:1b:33:04:bf:e4:6c:
45:b4:11:c6:df:7f:fa:ff:98:47:fa:fc:fb:69:44:
ad:ea:b5:53:f1:85:0c:d2:db:20:ec:35:85:e5:5a:
52:10:03:df:e6:51:9d:3f:56:80:1b:9e:76:ed:f8:
a9:0d:4d:04:19:26:a9:d1:af:fb:7c:f9:cf:d9:7c:
b6:1a:f3:4c:f2:59:33:eb:6f:c7:35:be:11:6d:68:
92:e4:e0:8f:95:4b:81:3e:d0:54:69:68:81:5d:54:
f4:08:d6:7b:71:ea:30:78:96:51:a6:fe:f3:17:c9:
25:ff:c9:de:a5:0c:c0:dd:1c:97:0e:fb:82:ab:32:
be:84:a9:4e:82:e3:90:5d:56:9c:b5:eb:8f:43:93:
02:4d:9e:aa:30:c3:8b:e4:df:45:38:fa:53:4d:81:
2b:4d:1a:42:c1:6d:c0:96:90:2d:41:0b:79:16:ba:
0e:c6:63:b8:3c:a3:00:d4:27:dd:c1:41:1c:16:7d:
32:d8:42:1b:2d:20:4a:a8:fb:5a:5c:bf:83:1c:c8:
cc:d7:bc:7e:ed:c5:c4:54:20:94:9b:89:cd:11:7c:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:6D:73:76:B7:29:A0:16:2C:13:7D:43:22:94:B1:DC:0F:E6:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147:c42::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:66:bf:f6:6c:79:98:25:9f:29:d9:4a:b2:a1:dc:eb:b4:ab:
92:0a:92:e2:67:48:72:c0:50:85:f6:c7:b3:e7:82:b9:0e:45:
00:30:b8:91:cd:c6:aa:63:32:f8:3b:f0:1f:f1:b8:56:0f:d3:
69:e9:cd:5f:a8:33:73:72:a2:02:68:a1:09:15:5f:6f:64:b1:
93:0d:ed:bd:ca:38:ef:d2:44:17:1f:c8:d6:75:5f:74:ae:f0:
e2:b7:5c:38:06:91:bf:81:24:45:36:71:8b:57:63:78:79:51:
84:0b:68:e7:c3:8d:2e:27:69:10:83:a0:0a:03:3f:87:12:b7:
3e:b8:0f:14:7d:80:0d:08:c8:93:d8:eb:6d:c0:9c:03:e2:d2:
5f:65:ba:75:5d:3b:34:3e:10:a0:a4:7e:50:73:ac:42:9b:3b:
55:30:bd:ee:ee:12:ee:85:2d:aa:cc:75:51:c2:0b:e1:bf:49:
ca:ec:49:f3:67:da:62:05:8a:16:fa:f5:eb:5c:cc:f3:57:6a:
4c:01:8b:a0:ae:16:c7:1a:64:7f:f6:f4:cf:72:1c:5e:ac:70:
28:6b:56:34:2f:10:83:37:9d:e6:82:c6:18:eb:2e:71:7c:d1:
a7:d3:22:09:5b:ea:41:aa:40:fc:9a:b1:5a:28:d0:d3:7d:8d:
ff:9c:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:33:22 2026 by rpki-client