
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
File: 0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa (raw, json)
Hash identifier: aT9UU3pe0QupzG25znFmMVtgiDusXpafE3jcWoCeB1w=
Subject key identifier: EB:45:D0:22:B1:52:CE:A5:6F:63:FB:EA:D9:AA:C7:95:FD:22:8E:D2
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584F655D7BD28B83D6BAF46FCEC0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 9009
IP address blocks: 2604:c980:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:7b:d2:8b:83:d6:ba:f4:6f:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=7fe034da-f3d5-4256-bf90-0e87c38f8d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:87:8e:03:e5:7d:98:30:34:69:c7:03:70:
e7:e4:3b:03:69:cf:04:25:d5:3c:69:fe:e0:d0:25:
a7:f7:f8:31:ef:d7:e4:50:17:ec:c6:4c:81:9e:3b:
5d:d7:f6:6d:86:e3:68:e4:93:b1:7f:3e:16:b0:16:
fa:f9:df:5d:bd:5f:23:26:53:4f:ca:7a:a3:1d:4e:
47:1a:36:bf:b0:ea:07:04:65:f5:26:c8:65:2e:ac:
b4:e8:ab:56:76:17:49:b7:34:bf:2e:8f:25:97:f3:
ba:e6:3d:c8:b6:bd:ac:42:0d:e9:72:c9:ad:f9:36:
58:79:44:1f:43:04:45:48:5c:25:60:bb:64:89:26:
9d:e6:8a:a3:9e:fc:57:49:ef:d8:af:c3:72:eb:fe:
37:1c:06:f7:5e:72:84:9f:31:f9:c0:8a:50:4e:1a:
e8:d8:14:46:aa:11:93:f1:6d:a8:d5:28:ee:bd:fd:
4a:e2:5f:b3:5f:dc:98:83:f7:64:6b:81:19:42:c2:
2d:d3:b1:c7:de:a0:b1:a7:fc:14:62:82:56:c0:f6:
94:b1:1f:07:80:a1:fe:b5:2b:c5:19:b6:bd:c2:9d:
db:bc:c3:87:fd:b9:f1:71:24:03:10:1d:c5:3e:74:
aa:d4:cc:4a:5c:c0:12:e5:54:3c:46:dc:ab:f5:2e:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:D0:22:B1:52:CE:A5:6F:63:FB:EA:D9:AA:C7:95:FD:22:8E:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:75:bb:48:34:ef:0f:85:fc:16:58:43:50:60:ac:bd:2e:b1:
f3:ba:e7:82:c5:36:8d:bd:f4:77:0c:1d:a4:5b:1d:e4:02:ab:
e1:0d:da:f7:6c:b9:2e:e2:91:c3:43:cf:7f:d8:b6:a4:81:6b:
2d:94:84:72:52:f6:ba:e8:5a:4e:e8:21:f4:18:5c:22:df:33:
26:19:2b:fd:88:ee:4e:cc:06:40:b7:79:21:15:c3:40:b2:68:
3e:5d:a7:7a:25:c6:e0:7b:b8:11:4e:05:76:20:bb:f9:64:4a:
a9:19:d7:52:c0:4c:6c:7e:c0:88:3a:af:f5:3c:3f:96:aa:02:
94:49:bb:f5:79:75:b1:0a:8b:69:4e:eb:b3:4c:fd:bc:73:b0:
d9:08:45:2c:25:e9:2a:35:a9:d8:f9:1a:bc:7d:ad:85:8d:c6:
08:77:13:d4:ac:1e:06:09:54:01:88:3a:a2:58:98:02:27:d2:
42:bb:82:cd:f4:30:5b:30:9b:b9:a0:42:46:c6:3d:e4:70:df:
2a:e8:08:8c:e1:31:3a:27:9a:cf:97:ff:32:73:df:d1:dd:f3:
17:99:76:f3:78:36:6d:0e:9a:23:53:a0:61:a5:be:c3:8e:4e:
37:54:4c:b5:e5:6d:e4:f1:fc:08:99:d2:14:90:20:72:19:6a:
9c:bf:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:12:35 2026 by rpki-client