
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72dd35f3-fec3-3142-b27b-3300a1812718.roa
File: 72dd35f3-fec3-3142-b27b-3300a1812718.roa (raw, json)
Hash identifier: XhMCUPT1UnRVUSko82doNzieWd5BvYNuNXVOwf/G8NI=
Subject key identifier: 05:64:22:59:D9:A0:5E:8C:CF:0B:93:71:DB:63:DC:7D:5C:15:D3:F5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F49846C301E1827294C113900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72dd35f3-fec3-3142-b27b-3300a1812718.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2600:1417:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:6c:30:1e:18:27:29:4c:11:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5e5a08ed-8968-4ce8-be06-3b5bdd2d71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:cf:b7:f2:4c:02:17:ec:bf:79:57:e4:4b:
3e:14:2d:36:00:d0:c5:ec:fb:39:57:08:17:b9:1c:
65:8a:cb:e4:3c:b9:00:94:ce:c4:01:f5:ad:c0:d5:
74:38:82:92:41:87:57:5f:5e:0b:e4:b9:c6:ad:c1:
d7:69:0b:01:47:1b:1b:93:c1:60:e3:ac:34:b2:31:
f8:83:2a:5c:29:90:f2:8b:58:dd:56:61:63:01:5c:
f8:75:c1:63:19:dd:a1:4d:53:56:11:f1:4c:63:80:
ac:66:61:d4:7c:a1:11:0f:09:f6:f7:b0:c6:1a:d3:
35:2c:e5:d4:fb:fa:89:52:c1:f5:1b:b0:86:c8:33:
0b:b7:5e:f4:f7:64:a5:f1:2b:3c:f5:57:d3:31:09:
28:b5:af:13:02:94:f0:f8:4c:20:6d:df:ce:62:87:
63:0a:10:f4:10:0d:d9:5d:4d:b0:9e:7b:6e:aa:06:
4f:7f:a1:9e:a8:7d:9d:79:f4:85:fc:6b:82:cc:dc:
42:3b:3d:77:50:5f:30:92:78:04:44:35:52:0f:5f:
23:17:47:09:ab:b4:51:82:07:2a:48:d8:c3:a3:ad:
16:40:53:3b:de:a4:35:e3:d1:02:8a:1d:47:60:4f:
13:43:da:56:9f:b1:02:aa:b1:2c:3a:35:37:e4:b5:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:22:59:D9:A0:5E:8C:CF:0B:93:71:DB:63:DC:7D:5C:15:D3:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72dd35f3-fec3-3142-b27b-3300a1812718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1417:28::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:04:17:d7:1d:08:fd:2e:ce:c5:49:55:49:0b:d2:c3:14:84:
37:0b:6f:1b:f2:ef:ef:62:f1:58:f4:ff:9d:68:34:86:ce:d7:
ce:ff:69:ec:02:5b:aa:95:e0:a8:08:6f:c9:91:02:3b:cf:58:
95:b2:a2:a6:f8:4f:47:29:b7:81:6a:bc:09:c3:ee:3f:ea:49:
39:b8:c3:c2:05:37:59:28:c3:2d:f4:fd:db:34:fb:14:c9:39:
b7:1c:ca:f8:e6:f9:7f:b3:14:db:a0:7c:40:db:ae:18:6d:f6:
db:cf:98:10:81:9c:fd:07:2e:4b:86:93:fa:2b:1e:68:49:21:
41:e8:1c:5e:f1:af:4c:d5:f9:98:17:95:e0:de:43:91:9d:05:
1b:15:b7:72:c9:b5:f4:d1:2c:5a:71:69:d0:a1:96:78:2b:b7:
fe:2f:b7:e2:5c:08:7e:59:b5:0a:cd:0b:a9:86:4d:c4:d2:9f:
6a:c4:06:9c:82:cf:37:59:0e:3c:58:46:6e:5c:51:98:0c:67:
4c:8c:d5:43:cf:65:85:19:27:bb:4e:6d:d2:b0:33:e9:a6:d5:
d1:82:53:05:77:ab:e2:1e:86:cb:40:50:da:46:89:1f:fe:47:
6a:f7:cf:b6:b2:27:d8:05:ea:67:1d:76:45:53:a9:9e:02:34:
9a:6b:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:42:13 2026 by rpki-client