
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
File: e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa (raw, json)
Hash identifier: JuivWwt2YAUK/Llgr6VUVgWyZtTEsmE6IX/CzmEDsAw=
Subject key identifier: C3:CD:9E:D8:F1:9C:BC:15:4F:60:1B:19:0D:AD:6B:4D:9E:1A:AE:05
Certificate issuer: /CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
Certificate serial: 010D0C9F4328584F3CE29E50C3FB1A08B3A85A00
Authority key identifier: 68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 398461
IP address blocks: 69.64.113.0/24 maxlen: 24
2602:fd47::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:9e:50:c3:fb:1a:08:b3:a8:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=a9abd612-f636-4fed-bfa0-46eb6800d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:01:c0:f1:7a:80:02:ae:49:18:4e:1f:1f:
16:7d:28:5c:cb:ee:9c:a0:59:38:15:89:27:26:38:
39:6e:5e:b8:56:83:6c:82:dc:e3:b2:ec:ef:f8:02:
0f:3c:09:7e:02:72:fa:60:1f:32:5a:07:7d:51:0a:
54:cd:24:d2:1b:2a:b7:b9:dd:69:cc:b8:dc:ae:fa:
d6:72:5c:1e:51:95:8e:7c:bd:7b:db:86:f0:58:39:
9e:b5:91:e3:23:9a:f9:1b:a6:3c:78:33:55:11:cf:
38:de:e4:68:3c:11:55:40:79:7f:dd:43:c5:24:0a:
59:2a:97:93:6f:ca:ad:d2:24:fe:84:17:cc:be:5d:
54:46:7a:a3:d7:36:ec:89:97:23:70:5e:8f:1d:93:
19:d5:08:97:55:14:0c:36:14:e7:75:05:cb:23:21:
6e:3a:ad:3d:2d:43:b6:45:85:cc:21:69:0e:ff:60:
b1:cf:f2:00:16:55:62:00:71:ec:69:f7:71:ce:6c:
49:18:3c:1f:60:b3:99:e1:a1:7f:00:4d:0c:f1:99:
4e:05:bd:70:d7:40:b3:51:94:26:b1:56:86:90:91:
5c:18:20:96:ad:dd:a9:e6:4a:64:c9:2d:bb:c4:f2:
3f:18:db:34:43:86:8b:0e:2c:8e:c8:29:9e:cf:0b:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:9E:D8:F1:9C:BC:15:4F:60:1B:19:0D:AD:6B:4D:9E:1A:AE:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl
X509v3 Authority Key Identifier:
keyid:68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.113.0/24
IPv6:
2602:fd47::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:b3:9c:de:ca:c6:3b:3d:90:b2:26:48:fb:2b:36:9c:99:ab:
5e:5b:30:f3:bb:d5:ca:23:52:c9:48:01:61:0b:a1:9d:84:db:
be:62:e7:7c:ef:75:f3:fa:09:d0:4d:e3:d4:0b:2f:42:c7:80:
76:6a:c3:23:1b:ec:49:a6:5a:5d:1c:fa:25:09:26:25:42:31:
8d:e1:be:8b:57:89:75:6f:4a:19:7b:3b:70:b3:af:a7:42:2c:
4f:02:57:d2:a1:9c:7b:53:24:29:29:d3:f1:13:b6:d9:dc:37:
15:de:ca:b5:6a:dc:21:a0:8e:4e:fa:36:02:83:99:96:f7:a7:
cf:dd:e4:9b:46:3f:f0:8a:a0:f6:dd:a1:0f:07:1b:f8:03:0c:
a9:ab:a2:a7:89:1d:e4:f5:11:a4:35:0c:c5:27:54:80:ed:46:
54:19:f7:74:e4:64:17:e2:0b:47:73:0f:39:0f:65:4c:d9:66:
31:fa:d8:3e:ea:e9:d7:4a:d8:72:64:52:4e:0e:8e:ad:e6:29:
e8:63:4b:cc:b7:4c:e2:aa:14:3d:d5:6f:53:f5:c5:53:45:90:
11:1a:0a:8a:a1:3d:9c:23:b8:84:ca:97:8f:35:37:c9:3f:c1:
2c:f7:4a:24:b3:87:8d:3c:c1:ea:8e:66:39:a4:d7:7e:5e:bd:
08:23:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:25 2026 by rpki-client