
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/b5e85ddb-74a4-3332-b768-f3a6b232989e.roa
File: b5e85ddb-74a4-3332-b768-f3a6b232989e.roa (raw, json)
Hash identifier: wreEv2HvtFrhJ3VOk/WjP+N7QO/fA2/Dra2wfKhUzh8=
Subject key identifier: 01:FF:CF:58:97:F1:31:59:BD:14:7F:6F:8B:98:5C:60:60:8D:3F:E3
Certificate issuer: /CN=d9f6ac92-07b5-4554-9d60-881006aaf145
Certificate serial: 010D0C9F4328584F74B824261925EFFF4EE7EE00
Authority key identifier: AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/b5e85ddb-74a4-3332-b768-f3a6b232989e.roa
Signing time: Sat 10 Oct 2026 13:00:13 +0000
ROA not before: Sat 10 Oct 2026 13:00:13 +0000
ROA not after: Fri 08 Jan 2027 14:00:13 +0000
asID: 402898
IP address blocks: 2602:f32b::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:74:b8:24:26:19:25:ef:ff:4e:e7:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f6ac92-07b5-4554-9d60-881006aaf145
Validity
Not Before: Oct 10 13:00:13 2026 GMT
Not After : Jan 8 14:00:13 2027 GMT
Subject: CN=8c9801d8-7475-4e3b-a26a-c220b5ef49cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:eb:4e:4c:65:da:6e:6d:c6:35:57:26:31:
6b:71:e0:70:ab:27:fc:8f:ff:24:a3:87:d1:50:ce:
c9:9a:b3:54:f0:c6:75:21:c9:07:3b:71:6d:fc:2f:
e6:4c:49:ed:a6:63:68:1b:d1:24:b7:f1:95:d0:07:
85:b8:8b:30:c9:14:36:10:de:dd:c2:46:46:18:c2:
c9:bb:77:5a:e1:f5:ca:c7:9d:18:fa:d3:1b:e8:fe:
b9:23:0e:ab:6c:23:ee:36:3e:89:f0:71:57:7e:4c:
25:71:63:ef:36:8c:af:df:ae:98:a5:0f:e3:8f:d7:
01:f2:1b:11:f3:c0:11:29:40:00:9f:3a:26:bf:fa:
cd:63:76:90:0e:66:cb:c2:e3:66:b4:9c:c3:09:60:
14:9c:13:50:32:76:2c:54:11:35:56:61:42:f4:09:
46:11:93:83:93:71:09:47:51:3f:af:f1:fa:65:ca:
01:cf:d6:ca:ce:1e:bc:bd:24:69:b3:e5:28:65:35:
cc:1c:d8:d9:7a:bc:d3:76:ef:c1:e3:ab:3a:0a:fb:
f2:ec:ef:d8:36:92:a0:84:88:15:1d:65:f1:36:20:
f7:49:2d:f2:46:cc:4f:70:ea:9f:15:cb:9c:cd:22:
b0:5f:85:10:5d:ac:67:47:54:af:5d:49:e3:db:f1:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:CF:58:97:F1:31:59:BD:14:7F:6F:8B:98:5C:60:60:8D:3F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/b5e85ddb-74a4-3332-b768-f3a6b232989e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl
X509v3 Authority Key Identifier:
keyid:AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f32b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9b:01:6a:d2:b9:4c:bd:cb:75:38:db:e3:51:41:a5:6a:7c:
4d:97:57:93:27:77:d4:22:8b:59:0d:c1:5a:1c:10:d5:66:0c:
20:30:8f:3c:ed:d3:a8:8c:8e:e4:eb:4a:73:69:88:45:8a:a5:
df:4b:6b:0a:3f:22:74:ab:75:71:7e:91:89:38:22:2c:07:3b:
42:42:b9:21:99:e2:cd:c1:49:d3:42:ac:00:72:85:c5:fa:1e:
94:86:ca:42:a5:53:56:e9:cd:b6:ac:67:1f:4b:8e:0d:a9:d5:
ae:33:a5:8a:5e:c6:56:60:2a:64:6b:a8:71:bb:9d:0a:11:05:
8e:22:5a:bb:04:43:f4:f4:a6:19:8f:40:a3:79:71:cb:2a:0c:
c3:29:a4:dd:60:09:aa:b9:b9:f8:58:f9:f0:4f:67:7c:4e:a2:
35:31:c9:c8:c2:78:c7:6e:01:a4:bd:d7:d4:58:7a:22:06:f1:
c8:b0:e5:fc:b3:31:15:a0:29:16:10:c3:93:f1:2e:66:c6:c0:
4d:aa:9b:11:96:10:6f:c3:c6:fc:76:65:34:49:25:2f:d0:69:
54:02:ab:29:cc:96:ca:9c:45:fc:fa:ff:73:83:33:5b:fb:0d:
e6:36:bc:64:64:97:e0:f0:e7:a0:50:88:16:d8:65:9b:58:8e:
8d:6d:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:58:56 2026 by rpki-client