
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
File: dfa13ca2-8a87-3b38-9706-132ae3f66301.roa (raw, json)
Hash identifier: ncBl/A0G8dNQwF/xWTRWC1Nmncc8Vlx/aU9pf7XbH+0=
Subject key identifier: 50:D7:38:2A:44:9C:63:08:39:A4:3B:2A:E6:ED:4C:62:EE:31:8E:64
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F4328584E5D14AD0CA783E5DAC4212480
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 3423
IP address blocks: 2602:fbdc:89::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:ad:0c:a7:83:e5:da:c4:21:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=f512e8a6-19b9-4e5c-a177-5afe241702b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:88:5d:0b:7e:14:0d:51:5e:62:1d:8b:58:
82:24:20:7a:92:49:54:95:fe:7a:3f:6c:79:f9:24:
ca:eb:6c:54:09:77:fd:96:7b:cf:95:41:c8:6f:19:
34:c2:04:af:ee:86:9a:9b:57:e5:b5:08:9d:d7:b4:
34:27:12:25:83:e6:d0:d4:3a:16:93:37:b8:ce:e3:
d8:6b:f4:66:09:a1:2c:01:30:3e:e1:86:73:be:1a:
f0:03:e3:be:23:7e:c5:a7:df:99:a8:62:0d:76:0f:
79:7b:a8:36:61:70:4e:2c:a2:97:e7:ac:e6:26:30:
e7:5d:dc:95:92:5f:9d:5a:4c:ca:25:34:ff:de:59:
88:b5:30:8b:01:b6:93:ba:51:59:1f:c9:c5:25:b1:
55:8b:84:e0:38:a6:6b:2d:23:04:dd:3a:3c:bd:bd:
c1:5d:ce:bc:70:01:2b:d3:b2:4b:7d:58:d3:9b:9e:
03:58:43:2a:37:5d:81:d0:93:5b:17:ec:cb:24:1c:
b2:47:e4:6e:c6:fe:ca:b2:0e:f9:c1:4c:d7:87:68:
7b:b5:89:d5:b2:43:2c:6f:f3:74:48:14:0c:36:1b:
78:18:16:03:91:43:54:9f:0a:4c:94:78:21:87:55:
09:79:d8:b8:5f:22:54:ed:aa:7d:a2:06:11:ad:7a:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:38:2A:44:9C:63:08:39:A4:3B:2A:E6:ED:4C:62:EE:31:8E:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc:89::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d4:3b:ab:67:e3:9d:17:62:a0:a0:2e:c0:cf:e7:4e:24:de:
f9:6d:2c:a9:79:91:31:ea:c0:69:fe:c5:c8:df:93:20:e0:6d:
46:c6:e7:ad:2a:1c:30:4d:c5:37:fb:4d:28:39:ad:f2:82:71:
5a:6d:9a:56:86:51:dc:87:13:14:22:05:e3:d4:50:6a:9e:eb:
7d:fd:20:99:f2:10:c2:48:5a:64:50:1b:eb:f4:95:78:55:04:
d8:de:9d:be:4f:ab:43:01:ee:0a:ee:29:29:90:c9:e1:60:54:
c9:82:a1:4b:01:c3:9e:2b:c3:1b:c2:4a:5c:75:c7:dc:50:87:
d8:86:0f:ae:66:65:5c:48:b4:ac:c6:5f:87:7a:a7:56:8a:25:
5c:e2:e0:62:34:7b:81:5c:36:64:82:1b:6a:77:fb:dd:3d:39:
e3:6e:59:30:44:ee:5f:af:36:2a:79:47:f4:f6:e4:e8:06:10:
90:05:ba:df:90:51:3e:63:ac:d5:c7:41:9f:a8:a4:bd:20:0b:
9d:68:9a:da:02:73:86:87:6b:5c:45:79:ac:7e:7f:07:02:fc:
f2:2c:e6:11:00:28:b1:85:1b:09:7c:ce:3f:9c:3d:b6:a3:f2:
23:3b:ea:a0:75:a1:a8:8b:82:02:42:e0:12:64:d8:58:b9:90:
08:17:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:18 2026 by rpki-client