
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa
File: 90f08997-b502-3697-b78c-ea92e4445b84.roa (raw, json)
Hash identifier: xsLfVF9ZtMhfglKc5XXUqz89GlrQ3b1zb5EUtcBC6nU=
Subject key identifier: 44:38:04:D9:F8:55:58:5A:C0:61:81:BC:D3:5A:FF:70:E7:37:73:61
Certificate issuer: /CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d
Certificate serial: 010D0C9F4328584F49880708DDC965257C8A7200
Authority key identifier: A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 6405
IP address blocks: 2604:e280:8600::/47 maxlen: 47
2604:e283::/47 maxlen: 47
2604:e28c::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:07:08:dd:c9:65:25:7c:8a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cfba590e-d781-4361-92f4-7911801735b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:01:e9:ea:1c:2a:79:9c:3b:2f:18:72:f7:
57:12:01:ff:d7:38:43:0e:4b:99:44:1e:1c:89:e1:
d7:26:5b:4e:78:be:e1:84:d0:c1:3d:97:4a:df:ea:
46:da:12:93:d8:5c:fb:19:a4:e0:5a:ce:74:a3:ce:
46:a7:d4:ae:12:b8:1f:98:c5:c0:08:0c:d6:80:bc:
9a:78:da:04:9b:18:8a:cf:87:fa:6d:38:27:78:99:
62:00:c3:8b:8e:95:3e:3f:63:1e:ad:e2:cc:15:e1:
77:3d:ce:0d:2d:c9:1d:dd:ed:eb:55:96:b6:53:95:
0d:14:f8:0e:93:37:fe:72:52:34:f8:1d:3d:ca:ce:
f3:4f:44:9e:ee:43:fa:1c:3e:1e:5b:a1:ad:ce:f0:
24:4a:c1:85:61:33:39:3a:d6:06:47:c2:24:26:8e:
b5:0a:a0:dd:41:7a:8b:f2:9c:5d:05:cb:28:d2:61:
15:da:cc:35:5a:0c:6f:1c:1b:bf:58:25:07:e3:47:
0a:6f:60:9b:d8:c7:79:a8:cc:74:f2:3d:bf:55:23:
59:95:38:71:ff:80:b9:59:9f:75:2b:8e:b6:40:84:
ea:86:31:76:60:c6:95:5f:f6:44:16:8b:f7:b8:fe:
f5:3f:42:d2:15:e7:fe:7d:e3:8c:09:48:4c:eb:b2:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:04:D9:F8:55:58:5A:C0:61:81:BC:D3:5A:FF:70:E7:37:73:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl
X509v3 Authority Key Identifier:
keyid:A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:e280:8600::/47
2604:e283::/47
2604:e28c::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:70:98:37:62:a6:da:db:c7:87:c0:ab:4d:14:8a:1f:f6:0b:
b8:52:0f:59:1f:8e:b4:ec:6b:12:7a:7d:fc:cf:9e:ae:2a:14:
03:16:1b:3f:5b:79:70:15:da:b0:8f:a1:c4:b9:58:61:ee:18:
49:47:40:81:92:61:a2:89:ca:49:aa:35:65:a4:b9:be:17:4e:
42:f8:3b:64:91:74:08:c3:03:11:5e:67:95:fd:08:31:d7:6d:
a7:a3:e5:b5:a4:92:37:17:7c:5f:83:4c:ff:35:9b:8c:f2:b0:
f5:80:e2:eb:d9:f9:30:69:20:2e:b2:cb:2f:31:d5:3b:c7:9f:
cf:d1:d7:0e:3b:44:a9:f2:b5:72:79:d9:07:89:5b:6f:69:90:
28:14:88:0e:6f:92:45:f9:fc:23:5c:62:2c:29:ab:4f:55:f1:
bc:e8:73:a8:b9:77:09:6c:0f:c7:a9:2a:a6:b1:91:e9:de:a1:
95:64:a4:fc:4a:57:2b:7a:42:40:02:2e:bd:03:50:e3:32:ec:
77:4b:d2:31:94:31:0e:31:cb:57:68:2d:20:15:7a:9a:86:d0:
24:d1:96:4d:50:a7:98:ae:64:14:92:29:e2:c2:2f:30:d1:92:
6f:7f:27:1b:bd:29:d0:db:3f:1b:19:41:be:6e:88:b3:96:64:
38:6c:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:18:49 2026 by rpki-client