
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89e6bc12-43b4-39f9-b464-5db2851f4161.roa
File: 89e6bc12-43b4-39f9-b464-5db2851f4161.roa (raw, json)
Hash identifier: xhaImLNXRmqfC0cZC2FysZaMLBW8xRP12tqIa6EavrQ=
Subject key identifier: CD:1F:F9:EB:72:E1:8E:D4:EF:0B:AD:2D:79:8A:D9:74:10:DB:1B:B4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F43DD29A2FDB19C1FCB1FB5D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89e6bc12-43b4-39f9-b464-5db2851f4161.roa
Signing time: Wed 23 Sep 2026 01:00:12 +0000
ROA not before: Wed 23 Sep 2026 01:00:12 +0000
ROA not after: Tue 22 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2d80:2900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:dd:29:a2:fd:b1:9c:1f:cb:1f:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 23 01:00:12 2026 GMT
Not After : Dec 22 02:00:12 2026 GMT
Subject: CN=0bdc83b8-7acb-4876-9f3d-6a928bbfd6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:a6:6b:c1:94:35:85:e5:c2:dd:69:af:97:
0f:5c:43:4d:4b:8c:fe:7e:ed:9a:79:94:27:5c:a2:
8d:c9:2c:7b:ee:cd:bb:d7:79:df:9e:b1:aa:0f:1f:
fb:01:63:15:11:63:d1:c9:5c:de:e3:83:ae:6b:b4:
41:c9:7a:41:7a:8e:50:04:8b:9d:6f:63:61:8c:4c:
85:fc:dc:96:89:79:0d:5c:0e:51:19:ff:5e:94:91:
68:00:22:8d:b8:e2:fd:81:9f:29:61:71:4f:a0:03:
69:e4:78:16:fd:5c:81:1c:6d:8b:2b:64:b3:01:32:
24:17:65:86:ee:f1:9b:20:d8:d2:c1:59:e8:8d:a7:
11:c0:ec:a1:7a:6a:26:41:96:e5:70:9f:74:fe:ae:
0b:f9:9b:cd:71:7b:92:85:e7:03:67:f8:b8:01:9b:
24:52:c5:df:c6:54:2e:1c:71:60:9a:41:68:91:54:
ea:3b:ad:d6:27:10:7f:56:50:68:76:3e:b9:48:a2:
8d:c5:67:a2:f8:b0:e7:19:9a:d3:f3:82:40:ba:dd:
5d:ba:f8:f8:e3:9b:22:96:93:fa:e9:cf:16:45:f5:
66:b9:4c:fc:66:4d:2a:b7:14:cb:5a:5d:a7:b2:d2:
a8:01:05:09:5e:a5:05:01:2c:58:6f:32:c4:28:5f:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:F9:EB:72:E1:8E:D4:EF:0B:AD:2D:79:8A:D9:74:10:DB:1B:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89e6bc12-43b4-39f9-b464-5db2851f4161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ca:63:bb:a5:6a:fd:ec:9f:1a:6e:ef:66:f1:01:09:52:3e:
c5:cc:e9:99:46:a2:26:8e:8c:21:56:95:4b:a5:97:89:03:a2:
8f:80:89:b5:13:9d:6f:98:3c:3d:68:aa:89:5e:02:1e:bb:d9:
70:fa:32:43:b7:71:34:89:63:43:25:46:e4:bf:b9:f3:20:bb:
63:8e:a1:de:0f:36:44:a3:ac:34:86:5b:e7:ac:d0:9d:b2:50:
0e:77:cf:84:43:05:14:4e:96:5e:fe:42:1d:c8:1c:a9:9b:3f:
f4:4b:33:db:87:92:30:4a:6f:30:d9:be:50:52:79:d2:b0:b5:
ea:21:1c:35:99:8e:c0:e3:92:7a:8d:cf:a5:4f:1e:11:41:d0:
c2:32:cf:a2:1d:f1:e8:d9:2b:2f:17:19:67:e8:f6:1c:7e:3a:
c4:3e:66:03:f8:b4:d3:43:a7:be:e2:1c:dc:15:cb:58:61:59:
51:c2:f0:75:b5:5b:04:c0:9c:27:dc:e8:38:72:d5:dd:41:85:
10:48:5b:7b:50:5b:c0:e2:71:8b:88:9a:4f:d8:c0:32:4e:56:
52:41:83:40:ea:78:c0:a4:5f:88:d3:e3:82:8f:45:04:ba:22:
cc:05:ab:ba:57:61:d5:86:48:a4:4f:52:64:26:58:44:47:10:
b0:1a:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:13:26 2026 by rpki-client