
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
File: 3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa (raw, json)
Hash identifier: /3ddBtXca+VQsiXwdZBQRP1H0xn8Z8j2oqAOu+G1x4M=
Subject key identifier: 36:AE:B3:23:27:DE:EB:E5:83:A4:79:48:24:5F:27:06:B6:54:11:BF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F4986514084DC588A71E93600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 2600:1009:b0c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:51:40:84:dc:58:8a:71:e9:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2a2bcd38-d8ed-4319-b7d2-cab22a69d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:f2:4f:35:6e:03:10:13:d3:84:13:ee:9f:
65:bb:49:c4:ab:fd:e3:68:98:5c:cc:cb:6b:e9:37:
7b:99:d2:44:71:1f:d3:8e:65:56:9c:6a:66:82:d1:
b3:18:d3:57:9d:59:a4:b4:b5:eb:26:b0:da:9a:a5:
b3:9a:fa:33:c2:0b:57:7a:47:3d:cb:4d:08:b1:dc:
48:1c:56:6f:ea:9c:89:c4:5b:6c:6f:14:ad:20:ac:
2e:ef:ca:6b:7a:b1:e1:5c:b2:00:d9:ac:b2:e2:67:
4f:e7:da:38:ff:2e:de:1e:65:d8:3b:b9:e0:45:e8:
b3:4f:6b:78:67:99:f1:e1:4a:fc:47:01:6b:a3:d5:
45:ee:30:a6:f3:69:9d:d4:60:a2:f9:40:3c:3b:1e:
08:39:66:c3:68:48:c5:bb:5c:b8:a3:b1:38:80:18:
37:c3:2b:b2:9e:51:5c:47:02:f7:65:a1:50:05:bf:
f0:d5:89:ab:b2:27:34:86:59:a7:1d:5c:54:40:c5:
02:09:ad:20:e3:3c:75:e3:4d:83:4d:4c:f2:72:3f:
18:7d:7c:aa:ac:fe:a6:02:b0:63:17:91:7d:0f:ce:
48:2a:f7:39:0d:6b:ed:f0:27:95:9d:e0:c0:62:34:
a5:16:b2:28:a4:b4:ca:3c:67:14:36:30:8c:9c:ef:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AE:B3:23:27:DE:EB:E5:83:A4:79:48:24:5F:27:06:B6:54:11:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1009:b0c8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:4f:de:d8:d9:07:75:ee:db:43:9b:b3:6e:7e:1e:8b:be:21:
d3:62:6d:a5:29:b0:e9:67:ba:f3:11:fb:99:1a:3a:f9:7a:6d:
fb:ae:b5:a5:90:0b:13:84:40:ee:f7:03:8b:80:21:fa:5f:b1:
44:3a:bb:bb:6c:43:27:58:ad:0f:6b:b5:d6:8b:7a:2b:ed:1b:
dc:fe:b8:c5:0d:ec:71:ea:96:c8:b1:4e:0c:e5:f8:5e:03:1f:
c1:3c:f5:04:71:8b:a8:c1:92:f5:19:65:1a:93:5b:4c:10:7b:
0d:c6:44:77:c2:38:56:67:a9:f1:2d:6e:cb:0f:bb:92:f8:e0:
c6:b7:92:04:67:db:fa:61:41:18:9f:64:46:fa:0e:33:79:a4:
bd:8b:f1:bd:0e:95:bc:ab:17:30:dc:a4:2a:a6:94:4f:fd:06:
6e:d2:21:e1:c4:2a:54:4b:d1:00:40:66:eb:c6:23:90:48:6c:
50:1a:40:07:0f:6c:89:1c:87:b4:e9:41:45:d3:a1:2b:35:aa:
e5:4c:16:37:bd:1f:39:74:77:29:99:b6:71:87:28:4a:a8:10:
0b:94:b9:e1:02:3b:74:81:76:81:9d:a0:74:f9:80:34:97:9b:
c2:a6:28:96:21:71:e6:b7:6d:d6:9d:44:32:c1:28:39:5c:d9:
7f:d8:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:45:15 2026 by rpki-client