
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7ad224e0-d979-3058-9cb4-ca3a801acf0d.roa
File: 7ad224e0-d979-3058-9cb4-ca3a801acf0d.roa (raw, json)
Hash identifier: 2YTgCGme7LriW7M2ZHtzsRnqAaLgghEkxOybpMOco2k=
Subject key identifier: 09:22:7B:51:60:E0:DC:B5:22:3C:EB:69:11:B1:46:00:BA:13:43:FB
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584F46A7F151C84FFD2C87759980
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7ad224e0-d979-3058-9cb4-ca3a801acf0d.roa
Signing time: Thu 24 Sep 2026 01:00:12 +0000
ROA not before: Thu 24 Sep 2026 01:00:12 +0000
ROA not after: Wed 23 Dec 2026 02:00:12 +0000
asID: 396998
IP address blocks: 2600:3500::/28 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:a7:f1:51:c8:4f:fd:2c:87:75:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Sep 24 01:00:12 2026 GMT
Not After : Dec 23 02:00:12 2026 GMT
Subject: CN=627c24cc-a168-4962-9f91-be3ebfe5d3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:53:b0:bd:4d:36:c9:55:e0:1b:ad:a7:81:
8f:5f:eb:9b:fc:28:0c:93:16:26:67:eb:39:b4:03:
ca:36:e4:1c:5e:c4:85:59:36:92:1e:b9:15:82:13:
b3:2b:52:08:13:ff:23:ec:60:cf:33:53:b1:d2:0f:
4d:65:96:6a:e7:48:d2:86:dc:56:78:12:e3:65:c2:
aa:c3:22:5c:9b:61:54:2e:0d:16:5e:8d:ac:98:81:
9e:bd:be:0f:11:e7:84:6f:19:dd:f8:7b:d6:ec:0e:
e1:db:10:74:d9:42:93:e6:ee:81:df:f4:f0:20:f9:
0d:8b:2a:7e:ce:59:ee:6c:ec:a7:69:c9:10:76:4b:
b2:9a:b3:8c:db:6b:4d:58:2f:35:0d:e1:b8:ad:64:
45:80:38:a4:3f:8b:22:e8:4d:a4:4a:e9:4d:1f:f0:
ca:b5:19:88:4b:b2:e1:5a:ab:c9:21:8f:fc:78:f3:
cd:35:14:c9:c9:50:58:68:37:20:cb:77:76:7b:02:
a1:c4:12:40:ae:b7:8e:e2:a3:2d:b4:ce:0d:1a:5f:
b4:6c:b0:c6:0c:dc:31:f8:b5:24:b5:a4:26:c9:a8:
b0:8a:7b:d4:1d:11:ae:96:ee:a5:ac:59:69:af:65:
ee:82:9e:62:b8:cd:24:4d:b1:06:a0:94:ab:83:0a:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:7B:51:60:E0:DC:B5:22:3C:EB:69:11:B1:46:00:BA:13:43:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7ad224e0-d979-3058-9cb4-ca3a801acf0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:3500::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e8:b2:33:f4:c6:87:cf:09:04:57:85:7a:72:49:a2:6d:2d:
93:62:c0:33:89:b7:e8:e3:07:c2:b5:cc:09:63:bc:13:24:df:
a4:c8:8d:b2:33:bf:23:f8:63:5f:99:00:ab:60:22:5b:61:0c:
d6:5f:d6:ea:d6:12:b5:9d:21:24:e6:57:84:3c:8b:5a:08:3a:
85:c2:9b:e0:e1:9a:04:33:fb:b5:ae:63:bd:9a:bc:00:88:92:
77:42:3a:61:6c:c3:10:3b:ff:36:f1:cc:de:75:21:d9:06:3d:
a4:44:e2:b9:28:62:62:47:07:71:f0:24:6c:5f:95:f5:37:46:
a0:59:3d:c4:da:98:18:d3:e5:57:6c:3e:eb:0d:5a:84:08:e7:
68:0c:f1:e7:8c:64:d5:2e:02:5c:5b:23:c6:85:b3:a6:6c:58:
cf:e9:52:65:a5:e4:b0:00:ea:8b:d4:0e:05:75:bc:de:a0:ca:
26:51:5e:50:7e:41:d5:93:7f:15:52:30:ae:48:d3:19:96:16:
0a:0a:ca:24:55:dd:d7:21:40:cd:00:7b:b3:94:c6:57:3d:c9:
46:3d:e0:07:a4:6f:84:f2:17:7d:8b:28:7e:b1:b8:bd:c9:bc:
1c:14:ef:7f:e0:46:7e:bd:03:1d:cf:48:01:95:50:e8:11:d3:
39:76:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:10:23 2026 by rpki-client