
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dcf7e42-03b1-36c5-9c4c-8e9f5dfac915.roa
File: 5dcf7e42-03b1-36c5-9c4c-8e9f5dfac915.roa (raw, json)
Hash identifier: 3KYfRbY3Pv6+RdRO5gdTqQOFjDbUjQLOtU8GNhsvFos=
Subject key identifier: CC:7C:74:34:2B:E8:A7:0E:1E:3B:32:D0:E0:B7:51:4B:BC:15:B8:C3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4277D8C6C54AC06EFC628C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dcf7e42-03b1-36c5-9c4c-8e9f5dfac915.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 2600:8800:3eb4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:77:d8:c6:c5:4a:c0:6e:fc:62:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=b229941d-723a-45c8-978b-650eb148de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:ed:bf:35:da:69:b2:ce:0d:17:57:b5:ec:
eb:ab:ff:57:15:45:7e:cb:15:47:8e:ab:95:75:f1:
e1:84:e0:68:c4:04:0f:af:74:88:c4:0a:18:53:90:
82:70:89:e4:fc:60:67:66:c8:78:3b:f7:75:78:1f:
1c:79:ea:b7:62:42:52:5b:59:26:55:73:0e:63:3d:
c8:9f:cd:f1:c3:b0:e2:b6:86:9f:70:91:1d:57:94:
33:70:e4:ad:c6:7f:a1:c1:d7:cc:06:99:80:b2:fa:
43:f8:e0:86:06:b0:3d:29:88:ef:f1:e4:49:db:a4:
38:16:7b:b1:e1:08:05:d9:d4:ea:9b:05:8d:b1:b7:
f1:d3:7e:b7:dd:b4:b4:75:8d:15:94:56:d8:4f:d8:
37:ed:85:35:89:d1:e6:45:21:ce:57:10:d0:7a:1f:
d3:e2:c0:3d:a1:45:12:10:c2:33:cf:94:f3:c0:d2:
ad:5e:bc:86:e6:66:61:5f:1c:3d:bd:e7:33:1e:ca:
bb:c6:cb:e3:21:e7:01:0a:d5:c1:e4:cd:02:3e:0f:
e1:88:9f:e1:ae:5f:52:31:b3:2d:54:78:5b:cb:8e:
dd:02:b1:2e:52:4b:33:8b:a1:16:3c:4e:83:da:e1:
cc:49:cc:df:7a:30:3c:b9:a3:f1:e2:12:38:f5:78:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:74:34:2B:E8:A7:0E:1E:3B:32:D0:E0:B7:51:4B:BC:15:B8:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dcf7e42-03b1-36c5-9c4c-8e9f5dfac915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3eb4::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:62:09:5b:a8:99:b7:ba:09:f6:e5:a0:f7:9d:2a:62:ec:0a:
10:22:84:7b:b5:32:ab:8d:63:82:5e:29:4f:b1:4d:31:94:d8:
bc:e5:06:2a:de:66:bf:03:9b:1e:2a:de:9b:83:35:d0:4b:9c:
a6:df:34:b2:c1:da:01:18:07:65:85:09:d0:1e:44:d3:1f:1e:
db:55:a6:e9:2a:43:cb:b3:7d:28:07:21:b1:07:39:54:14:3a:
1a:0b:06:b4:19:80:9f:3e:f1:02:a5:b4:bd:03:2c:74:9d:44:
74:ae:9a:3d:34:c1:96:c6:7d:a7:54:fd:41:e3:66:d6:db:73:
7d:9c:cf:b2:b6:92:f0:de:44:96:a3:63:5f:24:87:8a:d2:22:
1a:b6:7a:73:17:2f:1f:36:af:1d:48:51:bd:d7:9a:7b:d4:7e:
e5:a5:4a:aa:7e:0e:29:8f:34:b8:07:51:02:c3:0d:99:2a:f4:
19:a7:f7:17:18:f4:7c:ab:cf:e5:97:3d:6b:da:a0:f8:17:b1:
63:fd:b9:26:4c:7d:f2:06:22:9d:aa:72:97:ef:c4:e9:36:50:
a3:7b:c0:dc:67:ec:c9:8a:cc:c5:d7:d9:fc:6a:8f:38:c4:e9:
94:64:db:9f:76:55:28:86:57:fc:6b:65:07:9e:13:a5:e7:58:
b2:e5:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:03:02 2026 by rpki-client