
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
File: 86d17516-6609-38bc-b9c5-1de3645b206a.roa (raw, json)
Hash identifier: JA9gn165Yun9btCTBo93da0obrcIlWS4LW1ubPRY5DY=
Subject key identifier: 68:09:5E:87:B8:C9:B0:2F:3E:B9:BE:37:9C:11:03:2F:27:75:80:B0
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584C6E217D6C080C82043909BCC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 20253
IP address blocks: 2606:bc40:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:7d:6c:08:0c:82:04:39:09:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=14e43610-c01d-4721-96b5-6a28b726d6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:7b:c1:ed:e3:20:52:37:a6:14:64:bd:f0:
fa:d3:f6:32:32:dc:98:6e:23:b5:8a:29:55:41:f8:
d4:6d:0d:c4:7f:39:26:d1:9e:6b:a0:6a:37:a5:b8:
51:9f:ad:6e:ce:aa:67:e2:8e:52:1e:ee:da:49:a4:
75:5c:e5:06:2f:57:dd:2b:3d:ce:c4:13:b9:63:c3:
3c:52:3f:27:72:12:95:3e:9c:c8:bb:f1:cb:24:55:
12:62:c3:9e:d7:96:22:2b:1b:fa:14:1a:bd:30:81:
31:3f:17:45:91:37:27:92:31:dd:8d:d1:a5:3f:dd:
89:63:17:6b:ca:13:1e:13:7e:60:b6:68:e4:1d:54:
c2:ce:d4:4b:37:eb:a9:83:34:05:a4:99:08:41:07:
a9:cf:46:99:e2:b9:21:d1:66:26:fe:8d:8c:79:d7:
a9:f6:ed:9e:d2:5c:71:b7:a3:0a:ce:59:26:82:d3:
e2:91:6f:2a:4e:7c:e1:f6:54:d1:9a:bf:0b:43:3c:
43:d3:42:86:38:60:41:de:b1:0e:98:b0:81:05:1e:
2a:ce:72:a2:3f:1f:81:ab:5b:08:ab:0a:93:a2:63:
b6:f9:84:57:e3:8c:48:94:2b:16:a4:a9:68:48:75:
99:1e:a5:83:6a:2f:15:a3:95:bb:2f:a2:1e:66:81:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:5E:87:B8:C9:B0:2F:3E:B9:BE:37:9C:11:03:2F:27:75:80:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:202::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:44:03:e2:ff:4a:82:5f:92:a4:be:07:d7:67:cc:6d:72:3b:
6b:00:9a:1a:1e:c4:3a:34:82:01:c0:b7:f5:1c:a7:c5:c1:94:
ac:4b:97:b1:d9:62:3e:45:70:4d:4a:1b:43:43:95:fc:2f:02:
2b:d5:71:9a:44:cc:a2:61:64:ea:03:77:52:a4:01:8f:0c:49:
f0:31:35:d1:26:f5:67:10:b3:70:10:d0:a2:f3:1e:23:1e:cc:
37:78:59:f5:90:39:d6:21:77:f0:1f:85:7d:8b:ef:8d:d5:b7:
a9:b6:8b:73:7e:71:aa:7f:f1:ac:ad:ea:c6:1b:c5:56:ed:09:
f5:e2:60:52:aa:25:94:6f:71:05:88:08:29:b9:98:08:0e:f8:
a8:bc:59:2e:31:fd:1b:ec:0b:f3:5d:22:55:82:ba:9b:1f:54:
68:43:b1:58:6e:b9:af:32:8b:79:39:3f:63:58:a7:fc:b7:b0:
f9:8d:21:6f:24:30:ac:a8:ff:d7:d3:98:87:82:1b:83:0f:40:
45:38:5b:5b:fb:1b:4a:e6:44:c9:b9:33:48:1e:35:13:59:71:
b0:32:1b:39:50:75:31:74:f1:b3:4c:7d:89:55:73:5a:1e:23:
32:1b:50:72:fe:68:2c:37:49:92:06:bd:4c:d8:fe:7f:82:4c:
d8:e7:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:35 2026 by rpki-client