
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
File: 205510ec-fe65-33cc-a2dc-11dde1186393.roa (raw, json)
Hash identifier: U8pa1gjrjgj6akQ0HQTQP58WnSD96RvYRs7FNjGxAFY=
Subject key identifier: 60:06:77:81:DF:95:CE:FF:E8:96:E1:E7:9B:B6:B6:EA:EB:83:F8:A4
Certificate issuer: /CN=068fe099-ec29-42a6-8cc8-92597523d41f
Certificate serial: 010D0C9F4328584CD13CB6277F270D8002BFFE80
Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 33263
IP address blocks: 2602:f9d8::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:b6:27:7f:27:0d:80:02:bf:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=5820ee5e-942f-4fc1-91c4-4211044a2664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:0e:df:e1:78:02:84:c6:f5:e8:60:2a:d8:
b0:dc:cd:ee:bc:fb:d2:5b:20:15:07:1c:6a:79:d8:
1d:08:ca:f5:8a:dc:12:f2:25:8a:aa:20:07:fe:9c:
c0:fd:bf:b9:d8:8c:13:63:8c:61:e5:49:6b:31:7b:
02:2c:f3:08:f1:7a:08:f3:c3:99:69:e5:26:bf:d3:
6b:1d:d3:30:e4:2b:a6:b1:71:2a:f5:d5:09:9e:b9:
bb:e6:09:0f:98:72:ef:82:23:3b:bc:e9:c1:fe:bb:
0c:5f:f0:ee:4a:bc:29:d1:9f:f3:43:c3:68:2a:2f:
2d:ed:2a:6c:7a:d7:96:1a:b4:12:cb:4d:65:6a:c5:
c1:a1:95:8f:08:d4:85:32:97:64:26:52:09:07:6f:
2b:4c:40:5a:2a:7c:a4:3d:fa:7e:40:22:4a:2c:b6:
13:40:5f:c5:bb:29:49:b6:70:6b:7a:2c:39:3a:80:
36:6e:55:6b:04:df:e7:92:e5:be:73:af:49:40:71:
e5:12:17:b6:77:d0:0f:02:ce:96:9d:d8:10:4b:c8:
d7:16:be:d2:dc:32:41:2d:0e:5a:68:0d:0c:4a:dc:
6c:f8:14:02:80:91:4e:78:29:af:12:39:7f:8d:33:
87:f2:63:9b:5a:6d:78:f6:01:f9:08:06:0b:da:92:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:77:81:DF:95:CE:FF:E8:96:E1:E7:9B:B6:B6:EA:EB:83:F8:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl
X509v3 Authority Key Identifier:
keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9d8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7a:3b:80:d3:85:a2:28:df:4a:ad:c1:c2:e2:9e:80:d8:77:
8a:c2:c5:0b:42:39:5c:ed:c1:28:a1:2f:16:83:f6:01:b9:9c:
2c:eb:94:78:f2:c7:7b:6f:cb:c7:0b:44:13:ee:79:ec:f2:51:
a1:7d:44:98:01:55:fd:98:28:53:1b:27:e3:f0:08:a9:ab:d3:
64:1a:a1:54:f2:99:99:bf:18:b0:51:43:3c:31:e9:f0:a5:dd:
ae:88:4b:26:e6:a2:58:4f:27:f9:d2:b7:63:57:29:e3:fe:11:
4a:56:d5:a7:e9:1e:64:98:ef:bb:d8:a2:c8:4e:81:a9:9a:9c:
03:e8:b4:80:ff:8e:60:9b:05:11:b1:9c:ec:86:b1:ce:59:86:
30:ee:9c:c3:99:ee:fe:04:b6:2c:5a:f1:c2:7a:75:b0:02:db:
e0:a3:70:55:98:2f:3d:1f:c1:fa:14:36:a1:c9:e3:d3:06:a6:
21:61:16:bb:51:ea:ee:94:59:05:24:3e:27:b8:07:42:05:bf:
be:3a:13:86:e4:3d:d5:de:ea:92:79:4a:b5:60:29:4b:c2:9d:
6d:9f:8b:3c:82:53:64:00:25:31:b1:8d:ba:67:91:0b:cd:b7:
9f:29:29:6e:60:bf:97:9d:e2:56:f5:ec:fd:31:52:61:47:54:
38:0e:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:56 2026 by rpki-client