
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa
File: 90d904a0-dea4-319a-a1cf-1e858687b196.roa (raw, json)
Hash identifier: 0qPobvIbgBzFDsbZ3aA9Q0jzPtnnZAuJV9zmmYDFUoY=
Subject key identifier: A1:C4:9F:3B:B2:76:AF:87:1E:78:3F:5F:14:81:6E:DF:D1:50:5C:D8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E059C57C6EF4954E3627CEB80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 2607:f8b0:4006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:57:c6:ef:49:54:e3:62:7c:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=c9672504-9073-46ad-b0e6-bec5f9b2a08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:ea:ab:f2:c3:24:71:7a:94:57:91:e2:18:
e7:d7:d2:23:73:4a:18:ab:46:c6:53:93:50:39:19:
ae:80:89:a6:dc:77:a5:4f:02:0d:4c:99:d5:8a:0d:
39:ba:d3:a8:57:44:e4:7a:3b:4e:fa:68:fb:ba:11:
87:3c:37:6e:a6:68:54:d6:34:7b:b5:8d:4d:d4:fb:
29:4c:4e:8e:35:56:45:85:a6:01:4a:73:f7:eb:04:
be:39:dd:a4:41:f1:af:94:a7:89:56:a5:ef:e9:ab:
2b:17:21:83:d2:d6:c4:43:3a:14:86:22:d9:95:f3:
32:c0:c6:49:eb:ea:ca:2d:29:57:2c:e3:d7:1c:70:
61:26:18:46:3b:02:27:41:19:15:13:82:50:f5:54:
9b:15:59:56:a9:6e:a9:93:0e:82:51:55:3c:14:2f:
2c:0b:39:05:9a:20:40:0f:90:25:7b:22:15:f9:f8:
09:0c:ee:c0:30:c1:57:9b:dd:28:74:ce:10:bd:8b:
89:e2:a8:97:50:29:d2:d0:5b:1f:71:cd:81:75:53:
f8:ea:3f:de:b2:97:b8:ec:fc:f3:88:6f:8f:ee:42:
1e:73:17:e8:ec:f1:d0:5b:60:b4:ad:2c:db:63:8a:
9e:8e:ba:98:90:fd:e5:34:11:19:44:d4:4a:39:56:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:9F:3B:B2:76:AF:87:1E:78:3F:5F:14:81:6E:DF:D1:50:5C:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8b0:4006::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:5a:50:0b:15:28:cb:f0:6a:49:ad:40:04:d7:e0:02:5b:99:
94:cf:f2:3f:70:c0:e2:c6:22:d6:f1:a4:2a:25:75:7b:70:74:
9d:0d:fb:31:b7:ea:72:b6:ca:80:6b:24:c9:d2:5c:32:5e:32:
a4:12:f8:5f:7b:6d:c9:89:f0:09:8a:a7:34:dd:7b:46:fc:4b:
4c:08:61:66:c1:18:22:e9:29:1a:5d:79:1a:1e:94:a7:e3:c0:
e1:ab:a3:a6:39:11:fa:93:83:e0:65:bd:74:3c:49:0e:6a:17:
94:10:71:5b:27:0c:fa:bb:f5:8c:90:ba:15:93:e3:1d:b0:27:
e6:36:49:95:e5:4b:b3:63:c9:bd:f5:f2:4d:41:8f:e2:8d:b0:
d9:4d:2f:2a:5d:73:33:d1:e1:8b:81:8d:a5:57:7e:57:cf:32:
92:69:af:2c:79:f6:2b:78:34:22:26:7b:a7:67:b4:2c:d7:a6:
fc:10:14:87:1c:70:06:88:33:26:b9:75:63:e0:c9:a3:05:7a:
50:8a:c0:44:8c:70:1e:cb:d6:70:1a:e0:a1:53:ff:f0:ba:c1:
2c:23:f8:86:8e:99:cc:6d:4f:b6:03:a0:57:af:e2:27:b3:42:
e4:f1:2b:92:3f:8a:c9:0a:e1:20:d2:03:41:3a:9a:0c:61:73:
52:d2:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:59 2026 by rpki-client