
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
File: d21c9202-f4bd-3a23-abd0-2f4554817874.roa (raw, json)
Hash identifier: QxiBe7YX8CljTbOMUrseV2H85ybKvWT3GKiKrwqtuhY=
Subject key identifier: 01:74:DD:A1:F1:E4:5B:E0:D4:9B:6B:B3:C2:A4:42:E3:A2:92:7F:C2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F49845950EDCF4B0870206D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 2600:141b:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:59:50:ed:cf:4b:08:70:20:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ff87bda9-41bf-4fdb-92a9-47a53c6d99ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:57:58:81:c1:0d:48:00:38:c8:65:73:31:
4c:5d:72:47:fe:f5:40:48:a7:cb:f0:7d:03:e2:73:
4a:9e:bd:36:14:71:f3:02:4f:bc:80:08:f7:9f:68:
4e:b9:98:2f:d3:3b:1f:79:09:9e:8a:20:04:83:04:
d9:c3:ab:c6:7a:63:c5:ff:c4:ac:38:79:54:39:74:
f7:bb:b4:0b:61:d7:7a:ac:3e:fc:d1:2b:94:e5:17:
7c:9e:12:ec:b3:9d:e0:6f:db:f3:a5:36:50:d7:38:
68:59:d2:8f:5d:96:cf:1b:8f:85:a9:e3:8b:ae:6d:
09:80:84:10:58:66:98:8b:54:b4:8d:8e:62:80:0d:
d8:ad:ce:53:52:48:a2:0c:5d:d7:cb:fd:a0:f9:bc:
9f:f2:34:8c:49:a0:1b:5a:dc:3f:1f:9d:4c:fb:bc:
66:8c:a7:4b:3e:61:0f:93:2f:45:e2:98:88:dd:6f:
eb:69:d7:d5:7b:2d:63:d2:56:f7:3e:2a:b0:65:02:
60:37:03:82:15:58:3e:70:88:18:9c:98:4d:c4:0b:
6e:44:1e:ff:40:02:b7:6e:25:86:17:a2:9c:92:3a:
2f:cd:a3:69:08:e9:1a:94:bd:bd:41:8b:f2:a2:1e:
43:c4:58:9d:9b:e9:d0:a4:48:51:3f:9a:b2:2b:b0:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:74:DD:A1:F1:E4:5B:E0:D4:9B:6B:B3:C2:A4:42:E3:A2:92:7F:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141b:13::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:9e:1a:83:ea:8a:98:64:7c:79:29:fd:1e:87:c3:97:27:08:
95:4b:44:25:09:52:26:b7:9c:22:03:e9:75:d4:2e:d5:15:d9:
fb:d6:d6:ba:f1:dd:4d:94:2e:74:8a:0f:9f:ad:28:22:8b:b3:
30:c5:15:91:89:ee:2f:de:d7:79:73:95:9c:da:5e:68:df:41:
99:cd:e7:4b:a0:d7:ac:b6:d4:f8:dc:95:9b:ba:84:83:1c:9a:
2c:ac:9b:d1:41:87:c1:a7:a9:e1:0d:02:20:6b:bf:7e:f9:e4:
e5:6d:be:7b:5c:1f:7c:99:d0:3b:16:33:86:a5:42:54:e0:92:
ab:46:c9:e5:f4:db:1d:b1:08:a8:2c:b0:ee:d8:40:97:43:74:
9b:c2:f0:79:e4:33:68:25:a3:e3:66:85:e7:f0:73:90:f0:bd:
a2:a8:36:ae:a5:fb:bc:f7:50:87:ba:03:e5:3c:fc:23:1d:79:
32:34:17:14:13:0f:fb:a8:21:65:a8:63:85:0f:3f:ab:a6:19:
ba:d4:41:97:51:6e:f8:25:19:b3:73:aa:ef:3e:22:74:da:94:
f6:45:59:a5:ff:be:99:ea:c9:dc:96:d5:ec:41:7e:6c:e7:67:
5e:0e:01:aa:79:83:b2:26:e3:b2:90:7f:5f:59:cd:5f:5c:9d:
a5:fc:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:53:46 2026 by rpki-client