
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa
File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json)
Hash identifier: VRILb24V8oYGeA7ppLTT3rXWYCJ94TOrDSXmhJUbe6U=
Subject key identifier: 5F:00:22:42:DF:16:6E:26:75:A3:15:4E:7B:A0:0B:8A:A6:15:A8:72
Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
Certificate serial: 010D0C9F4328584F497561DC1EB51E51D5485BA0
Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 398653
IP address blocks: 198.62.160.0/24 maxlen: 24
2602:fbd3::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:61:dc:1e:b5:1e:51:d5:48:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=36dc93d7-6943-452d-a926-0f3bfaed4ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:9f:aa:9d:b8:47:06:21:3c:f7:3d:23:1b:
f6:08:dc:0e:53:e1:97:19:5a:18:8e:0a:05:ee:2f:
7a:e9:b4:c1:18:f8:80:cc:0f:f2:f0:67:8c:c7:0c:
1a:0d:c9:03:91:bb:00:aa:b9:39:05:12:bf:4b:1a:
e0:f9:0e:ff:70:fd:52:36:99:1a:08:72:ff:3b:21:
e3:99:73:15:30:22:c6:a5:6c:22:94:d0:12:e7:84:
2f:fc:fc:21:3e:03:d7:9f:e0:a0:d9:d0:68:4a:a0:
08:56:1a:0b:ec:0b:14:11:b2:90:5e:f0:a4:6c:11:
3e:d1:e3:f2:56:48:a9:1b:80:06:f9:05:f3:a5:b9:
2d:dd:e5:7a:12:d9:70:50:0d:db:84:d6:cf:ad:aa:
09:25:c5:08:dd:a1:de:96:e5:5f:2e:4b:88:14:00:
46:3d:6d:ea:77:14:f8:00:47:33:65:92:ae:a7:4c:
97:52:8f:64:a7:4e:c5:7d:3d:9c:fe:c4:b1:fe:eb:
36:5d:18:1b:2c:82:2f:05:96:fb:9e:02:9f:6b:e8:
94:8a:a2:97:76:15:c1:8a:d5:ac:a3:1f:2b:96:f7:
6b:db:c0:49:83:46:8f:b5:86:66:4f:b6:28:1c:df:
d5:d4:b1:41:65:cf:6d:c6:4a:c5:2f:f5:15:87:b2:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:22:42:DF:16:6E:26:75:A3:15:4E:7B:A0:0B:8A:A6:15:A8:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl
X509v3 Authority Key Identifier:
keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.62.160.0/24
IPv6:
2602:fbd3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:18:54:f6:a1:72:5e:00:4d:4d:5d:11:b0:2f:43:b7:b2:86:
c1:b2:ce:80:fe:dd:0f:33:98:a6:20:5b:5e:79:14:31:62:ca:
0f:8f:ab:29:33:0e:c3:ce:fe:b0:14:7c:85:8c:04:a3:a6:1d:
cb:6f:ab:0a:6d:90:d7:cc:19:ec:87:4f:ea:b6:0e:cd:a1:82:
8f:f1:34:60:0f:6c:e0:af:5d:9b:79:ab:45:b8:4a:93:c1:10:
d0:17:00:f4:c5:28:a2:0d:39:6a:47:45:84:23:e6:62:17:6e:
21:f9:f5:fc:3a:90:22:de:43:79:30:10:fd:b5:8b:a4:0f:91:
bb:b6:55:7f:36:db:fc:25:43:d7:ee:d5:63:36:cf:a8:13:58:
45:7f:e0:bf:7e:02:da:3d:41:73:e5:9b:e6:bf:92:5e:fb:6a:
b5:06:74:66:e3:dd:70:a9:21:78:f4:6d:3c:89:d2:77:d6:53:
2b:88:7d:94:c1:79:26:c5:27:ce:f6:43:f8:d4:1c:31:19:5b:
dd:02:c9:62:e0:f8:3d:69:01:b9:4b:8f:9f:13:96:df:1e:31:
b7:d6:23:17:ed:81:be:a9:f2:78:b2:90:64:b5:b7:5b:2d:2b:
c2:a3:19:5c:86:20:4e:c3:44:bf:b1:39:07:9d:9e:3d:c4:19:
60:d6:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:27:48 2026 by rpki-client