
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/89a25c18-c217-39b6-847a-d72e72dc42d1.roa
File: 89a25c18-c217-39b6-847a-d72e72dc42d1.roa (raw, json)
Hash identifier: Ku+gtceLTRWYIkdrblJ2ALM2KirZWIbrjUwOtadxs1A=
Subject key identifier: 8F:CC:72:8D:83:B9:2F:01:AE:02:DD:CD:FD:AE:0C:18:B3:D0:31:4D
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584DD35B116B05D87009F158F4A0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/89a25c18-c217-39b6-847a-d72e72dc42d1.roa
Signing time: Thu 14 May 2026 01:00:25 +0000
ROA not before: Thu 14 May 2026 01:00:25 +0000
ROA not after: Wed 12 Aug 2026 01:00:25 +0000
asID: 20253
IP address blocks: 2606:bc40:f23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d3:5b:11:6b:05:d8:70:09:f1:58:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: May 14 01:00:25 2026 GMT
Not After : Aug 12 01:00:25 2026 GMT
Subject: CN=2245189a-50c7-4840-937f-3fa4e97fa99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:99:23:18:c4:8c:f1:40:6d:52:df:74:14:
69:a5:96:50:b0:fe:3d:f0:8e:28:71:d2:9e:0b:5b:
84:22:1a:81:5b:38:a6:2c:b1:7c:c7:1e:4f:f8:6c:
f9:99:1a:5a:04:14:35:ef:5d:6b:54:09:d0:a5:df:
7f:8d:fc:b6:e4:dc:26:d6:ac:b2:26:74:20:b8:45:
0b:12:5c:a4:8d:a4:3f:1d:fd:20:6a:ce:f3:77:65:
74:bb:77:ff:99:69:1c:f9:3c:5b:9c:2b:2b:bb:87:
ea:c4:3e:2c:55:93:c6:f4:7a:32:da:1f:76:e6:57:
55:1e:32:2a:9d:ba:38:18:e3:2c:02:2e:03:3c:93:
ac:eb:9b:24:ac:8b:7a:a1:71:cb:4e:f1:9f:3e:4a:
9f:df:eb:a3:b4:d8:73:5e:66:89:05:a7:69:24:cb:
ba:df:7d:80:3e:d9:46:c4:15:90:00:7e:50:15:1d:
b7:5a:06:b4:2b:db:15:44:23:00:ed:7c:24:02:65:
49:18:68:42:1b:4f:91:7a:80:4e:40:41:be:6e:1f:
f8:35:fd:ce:51:30:ee:fb:a3:29:7a:94:86:77:1c:
e8:e7:65:40:51:ad:c2:49:5c:e2:cd:44:ee:72:9e:
44:09:4f:fe:8c:51:79:de:51:44:c8:39:ef:30:ea:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:72:8D:83:B9:2F:01:AE:02:DD:CD:FD:AE:0C:18:B3:D0:31:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/89a25c18-c217-39b6-847a-d72e72dc42d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f23::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e6:88:89:f1:93:ad:6a:6c:4e:32:fd:e9:36:05:5e:8f:85:
ed:58:48:18:45:bc:0e:e6:57:b3:35:9d:25:54:ff:1b:77:32:
e2:48:d6:80:51:61:f6:c1:60:8b:46:75:30:bd:9e:b7:da:66:
23:d5:f5:ee:f4:fb:28:8f:79:90:38:52:c0:4f:5a:fa:80:d1:
51:1e:6a:96:aa:e4:6f:5e:ca:1c:9c:47:34:3e:93:b1:38:12:
ab:2c:89:e4:9c:69:fa:c4:f1:65:ed:e4:a6:3e:af:3b:d1:8a:
96:31:56:29:2f:e8:1b:92:6e:63:ea:98:53:45:b4:de:74:c6:
21:f4:7a:12:c1:19:7a:7e:31:17:86:ef:85:f5:4f:85:2e:22:
e4:2a:67:81:65:a3:fc:e3:04:87:26:5a:af:cd:eb:23:93:1b:
29:bb:e7:dc:61:51:a6:55:44:d2:36:ce:4c:3a:f4:75:52:1e:
70:22:96:81:54:45:07:35:e2:3f:7a:3a:a2:e6:b0:8a:a7:ad:
26:16:37:b2:e2:5f:af:3f:72:fa:e8:ad:a3:b5:2f:70:68:26:
74:6d:e8:5a:0f:6a:9c:57:76:2e:57:dd:bc:20:d2:2d:10:27:
5b:17:f7:54:45:03:6e:1c:2c:c6:e2:81:b7:af:9d:c0:9d:4e:
b8:7b:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:22 2026 by rpki-client