
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
File: 6920a5d2-97bf-3fe2-a29e-10d959837927.roa (raw, json)
Hash identifier: op8lE2KStL5ziYJMcDBzRuc7jE53SIxpkQkTsLCSats=
Subject key identifier: 7B:D3:0C:7D:C7:74:88:39:CD:AB:57:37:D7:C3:CD:DB:B9:72:56:AD
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F4328584F4542999CEC50F7894DFD1F00
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
Signing time: Wed 23 Sep 2026 13:00:11 +0000
ROA not before: Wed 23 Sep 2026 13:00:11 +0000
ROA not after: Tue 22 Dec 2026 14:00:11 +0000
asID: 16509
IP address blocks: 2602:fe40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:45:42:99:9c:ec:50:f7:89:4d:fd:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Sep 23 13:00:11 2026 GMT
Not After : Dec 22 14:00:11 2026 GMT
Subject: CN=727f15a6-b0de-4ac7-80a7-5533bf1487f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:3b:46:9b:d5:a8:d8:39:69:00:05:0c:70:
f4:58:a8:78:c7:1e:11:a2:21:2c:e2:bb:8d:21:90:
49:97:1e:fa:2f:b5:13:cf:0e:4e:54:4c:de:0b:75:
70:7f:a9:51:eb:81:bf:95:22:b4:f4:a7:70:5e:c4:
9a:b8:0d:31:7f:a0:b6:3e:ae:8a:fa:e9:20:63:b2:
62:18:72:57:4e:9a:57:a8:03:ca:ea:bb:21:04:96:
ee:4f:aa:a9:a3:19:c0:c6:48:50:34:85:01:e8:8b:
16:96:33:49:f4:f5:5a:50:7d:f1:43:5c:a3:b0:c0:
9f:0a:36:67:33:bc:73:73:71:27:2a:97:12:e4:d9:
e8:cf:09:81:08:e1:c9:23:94:a9:60:38:0f:02:45:
d5:d9:1f:5c:91:cc:46:70:92:91:a5:ea:76:a7:65:
79:7f:0d:99:7c:f4:7d:b0:66:5c:1e:f8:69:5a:41:
b0:b5:3d:4e:19:79:ec:a5:e9:6d:57:7a:45:c4:bc:
00:77:a3:d0:e3:7a:73:7e:94:1a:c6:42:84:76:66:
3e:a5:dd:18:36:13:e0:3c:67:9e:e4:31:8e:97:45:
5b:f2:c8:bb:5b:f3:ad:01:8f:23:eb:ba:71:f4:2d:
49:d1:35:23:80:05:3f:82:0a:b2:aa:07:e7:b5:f5:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:0C:7D:C7:74:88:39:CD:AB:57:37:D7:C3:CD:DB:B9:72:56:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/6920a5d2-97bf-3fe2-a29e-10d959837927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe40:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f0:bf:ff:01:32:ba:e0:fd:f8:a3:22:ff:e2:f2:41:e0:e8:
72:7a:2a:34:ca:62:83:e8:f6:1a:d6:42:14:92:90:79:2c:73:
95:9d:42:ba:08:28:d9:a8:95:ab:63:12:26:b2:1d:c7:5a:6d:
bc:fc:d3:17:74:5e:0f:02:8d:90:5f:af:29:bf:67:d4:69:dc:
73:2b:b4:f2:cc:b9:d7:b1:1d:a5:09:fe:0e:28:23:97:b4:2b:
bd:09:68:6c:76:d7:49:92:09:d7:e1:e3:85:40:31:c2:ed:e3:
d0:64:cd:c1:ac:eb:86:48:3c:5c:43:38:96:a9:93:c7:12:b9:
b4:b9:34:7b:58:71:83:c9:14:37:a1:18:53:5e:10:60:05:81:
cc:1d:d8:1b:05:0f:cc:b7:07:c1:92:3f:6c:73:42:75:ed:9a:
c5:bb:d6:df:29:cc:97:ac:da:72:ac:49:51:8b:69:1f:0b:5b:
d1:f2:9f:99:5a:d8:82:2c:dd:9a:9b:95:58:ad:ea:fc:3a:1a:
61:6f:98:ba:77:8e:9b:38:b8:aa:ed:b9:9b:12:f1:c8:c9:97:
5a:d1:aa:60:dc:f7:9f:ec:74:9a:10:ec:69:56:7a:0f:6c:98:
e7:b1:1e:59:0c:37:66:0d:08:a4:8a:d0:db:88:fa:20:d1:06:
03:ca:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:58:23 2026 by rpki-client