
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa
File: ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa (raw, json)
Hash identifier: +tXXQrrfw+cgnelPhpEC9Uj0oDiWw+YKnOZv/en7WT8=
Subject key identifier: 38:78:A0:CA:23:17:9D:DD:8A:EA:1A:BD:D4:A7:3E:6F:67:56:E1:56
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584F3FAD3CCB4EF88FB317BD3300
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 20253
IP address blocks: 2606:bc40:24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:3c:cb:4e:f8:8f:b3:17:bd:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=5d866161-c7a4-4e12-9784-2d32ba371b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:45:5e:86:2d:ee:42:d2:cf:ef:13:43:f4:
ec:8a:e8:38:70:a5:e9:b0:d4:e9:79:1f:69:de:a0:
41:b4:a1:76:40:90:66:5a:9c:14:f6:bc:7c:c0:55:
d6:8c:07:18:dc:42:f9:54:fe:62:1b:52:34:27:4c:
80:21:5a:55:cf:76:a7:05:d5:07:4a:54:e5:44:7d:
26:25:21:e9:24:0a:3c:d7:89:18:fc:b9:01:9f:31:
da:d8:09:60:7f:40:e6:16:18:45:42:63:c7:f4:db:
5b:98:48:a4:36:0b:7f:83:6a:1e:86:ed:ea:b7:34:
b2:d5:73:96:1d:e1:31:3d:72:43:c1:fd:f3:d8:18:
f8:a7:46:8b:6f:ce:99:6e:5c:3c:af:4f:69:a0:e3:
8e:4c:f7:1f:63:72:68:3d:60:43:77:b1:eb:68:99:
f5:2e:c7:b7:b3:8c:46:e1:00:f4:12:7b:88:41:8c:
55:cc:11:58:18:6e:0e:94:2c:9b:94:3b:2b:12:a3:
33:25:54:b0:6d:29:5f:99:81:f3:4c:a4:81:21:0c:
8e:33:ea:ab:e0:6b:42:91:b4:8d:fe:67:1d:c8:ed:
73:50:9b:fa:4d:e9:29:f5:e1:a4:47:9b:55:14:c1:
e0:d2:8a:96:ea:d0:b0:e9:8b:0c:ad:14:f7:7c:66:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:A0:CA:23:17:9D:DD:8A:EA:1A:BD:D4:A7:3E:6F:67:56:E1:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:24::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0a:79:d2:51:e3:c4:ca:0e:66:f6:a5:db:70:64:32:68:e6:
89:d1:cb:55:f3:25:d2:3a:1a:a7:54:b1:b7:fa:e4:d9:90:5d:
a2:44:53:c3:9d:31:5b:ff:dc:28:43:b0:c1:b3:d3:f3:ef:89:
9d:37:96:6c:e7:a1:57:01:61:d8:4f:40:13:2f:1a:ca:79:c1:
59:87:f4:f3:2f:6b:68:4e:a1:d0:4c:81:ce:69:a7:14:36:60:
21:79:c7:1a:a5:57:95:72:d5:cb:16:48:c8:9e:5a:eb:c0:68:
fc:7e:d8:49:94:12:49:59:e4:68:5f:33:b5:54:dd:ec:bd:e4:
eb:c0:dc:95:78:a8:e2:e8:a9:65:83:ed:ef:7a:67:1c:48:c6:
9c:56:d7:d0:da:40:17:26:28:40:67:92:67:e5:db:be:d4:9d:
7c:79:c2:ee:d9:2a:ca:c3:bd:5e:e6:52:0a:b1:84:31:71:05:
e2:72:71:d5:61:b6:85:92:4f:ae:b2:9c:ae:69:d1:ad:c0:21:
f9:d5:c9:3d:4e:53:a5:ac:af:47:b1:bc:f0:ca:09:0a:5a:c1:
0f:4c:bd:65:83:9a:bf:9a:8a:6c:54:cd:d4:a7:d9:eb:c3:2b:
72:62:05:b7:60:40:0f:60:5e:19:a5:95:ab:90:0d:15:e6:9a:
bf:db:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:34 2026 by rpki-client