
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
File: 86f557d8-087d-3afd-a352-3f7763892440.roa (raw, json)
Hash identifier: cTyWjfbUsTA7wu3bYzwfRQshFzhikm8qCWXoGgQq+w8=
Subject key identifier: A1:F0:47:01:DF:FC:8B:56:DB:4A:F8:B6:58:8B:A3:94:80:43:69:0D
Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial: 010D0C9F4328584E0D8426E8F2CD5789B8406B80
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
Signing time: Wed 03 Jun 2026 21:00:12 +0000
ROA not before: Wed 03 Jun 2026 21:00:12 +0000
ROA not after: Tue 01 Sep 2026 21:00:12 +0000
asID: 40271
IP address blocks: 2620:11a:b002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0d:84:26:e8:f2:cd:57:89:b8:40:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Validity
Not Before: Jun 3 21:00:12 2026 GMT
Not After : Sep 1 21:00:12 2026 GMT
Subject: CN=aa069137-a2d4-481a-819d-50e5bca98808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:b9:f6:c8:3d:ac:01:dc:db:a7:d0:9f:ac:
01:86:59:ac:09:99:9e:91:98:4d:ba:75:25:90:a7:
f9:fd:01:79:3d:2d:1e:07:b4:0a:72:bb:73:b2:1c:
7e:da:70:2c:ab:fe:4d:d2:51:a6:f5:3b:b2:37:f9:
b9:93:0f:e7:e8:ae:1e:a6:07:23:bf:94:91:83:f4:
2b:de:c8:b3:d5:7a:c9:fc:52:97:43:4d:d1:66:bb:
c1:9e:57:8f:5e:96:e6:5a:1d:d9:24:93:b1:6d:fc:
d6:18:41:b5:bc:42:f6:cb:44:fe:64:aa:f1:95:c8:
44:f3:9e:a7:f6:30:48:b0:22:e7:e5:d5:33:ba:24:
42:ae:28:1f:0d:b5:b2:90:14:bf:8c:06:92:18:61:
c7:c5:03:45:95:df:9d:05:df:45:7d:eb:92:da:dd:
3a:cd:e0:66:a9:17:c6:ff:b6:fd:65:7a:2f:b5:68:
a9:fe:0f:44:e7:42:1d:a1:1d:51:1f:0f:89:2e:fb:
df:99:90:19:b5:99:66:80:33:d1:19:25:a9:30:97:
f1:dd:36:3f:64:0b:97:8e:c6:f8:95:4e:ec:dd:e5:
9d:fd:a9:e8:da:b3:77:90:f5:1a:d9:38:24:07:bc:
ef:50:bb:75:d3:38:b0:d1:18:20:27:82:84:2e:83:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:47:01:DF:FC:8B:56:DB:4A:F8:B6:58:8B:A3:94:80:43:69:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
X509v3 Authority Key Identifier:
keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:b002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:9e:1b:de:98:ca:79:ec:e1:4f:61:f6:e8:71:45:98:dd:ee:
f0:ff:a6:a7:29:ab:56:62:05:15:4c:08:dd:93:a8:0a:35:df:
1f:38:14:b9:a3:eb:f3:7e:54:64:95:96:b1:68:05:a7:21:71:
40:89:f2:c5:15:16:63:3a:9c:8d:dc:d6:fb:df:21:46:4d:91:
6f:81:76:2e:83:ee:77:ed:54:62:6d:32:46:25:3c:84:f2:f0:
81:a3:6f:47:85:9d:4b:cf:7a:ab:af:e0:bd:5a:3c:ea:da:ac:
aa:fa:13:d5:08:eb:a9:98:80:30:a4:e0:8e:d3:2d:37:1c:5d:
24:3e:74:fa:8a:48:11:e6:f9:d3:b2:27:45:69:a3:de:e9:20:
f2:33:b7:46:24:17:2d:a4:0a:66:15:2e:68:5e:f3:88:b5:74:
63:64:54:05:8f:13:64:81:da:32:8a:63:52:a9:7a:ed:fa:33:
54:e6:80:3e:e7:20:be:03:b6:1e:c0:da:81:bc:64:f1:08:d7:
e7:c5:20:61:ba:49:84:5f:ef:cf:f6:2f:80:e3:8e:51:ff:b0:
4f:27:91:61:7d:31:a9:f8:83:f9:8f:fe:a8:c4:93:c4:4c:61:
90:b8:73:69:1d:70:0e:bc:a8:35:b6:06:e6:31:b8:de:9b:71:
a1:d4:8e:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4NhCbo8s1XibhAa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm
NTIyMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
YWEwNjkxMzctYTJkNC00ODFhLTgxOWQtNTBlNWJjYTk4ODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsu59sg9rAHc26fQn6wBhlmsCZmekZhNunUl
kKf5/QF5PS0eB7QKcrtzshx+2nAsq/5N0lGm9TuyN/m5kw/n6K4epgcjv5SRg/Qr
3siz1XrJ/FKXQ03RZrvBnlePXpbmWh3ZJJOxbfzWGEG1vEL2y0T+ZKrxlchE856n
9jBIsCLn5dUzuiRCrigfDbWykBS/jAaSGGHHxQNFld+dBd9FfeuS2t06zeBmqRfG
/7b9ZXovtWip/g9E50IdoR1RHw+JLvvfmZAZtZlmgDPRGSWpMJfx3TY/ZAuXjsb4
lU7s3eWd/ano2rN3kPUa2TgkB7zvULt10ziw0RggJ4KELoOrBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHwRwHf/ItW20r4tliLo5SAQ2kNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5
ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvODZmNTU3ZDgtMDg3ZC0z
YWZkLWEzNTItM2Y3NzYzODkyNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4
OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj
ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz
MmE3Y2Y1MjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGrAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+eG96Yynns4U9h9uhxRZjd7vD/pqcpq1ZiBRVMCN2TqAo13x84
FLmj6/N+VGSVlrFoBachcUCJ8sUVFmM6nI3c1vvfIUZNkW+Bdi6D7nftVGJtMkYl
PITy8IGjb0eFnUvPequv4L1aPOrarKr6E9UI66mYgDCk4I7TLTccXSQ+dPqKSBHm
+dOyJ0Vpo97pIPIzt0YkFy2kCmYVLmhe84i1dGNkVAWPE2SB2jKKY1Kpeu36M1Tm
gD7nIL4Dth7A2oG8ZPEI1+fFIGG6SYRf78/2L4DjjlH/sE8nkWF9Man4g/mP/qjE
k8RMYZC4c2kdcA68qDW2BuYxuN6bcaHUjr0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:04:26 2026 by rpki-client