
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/3afd7df1-6050-36f5-b7bc-2593f60eb7bf.roa
File: 3afd7df1-6050-36f5-b7bc-2593f60eb7bf.roa (raw, json)
Hash identifier: hn3SI5MDl82klThLLXVMgjGLDUYMrge/qYXW5RW16fE=
Subject key identifier: FB:0F:F6:21:2F:73:8D:9C:0A:71:AC:4A:17:5F:04:65:AC:AC:3E:4F
Certificate issuer: /CN=f639f2ac-d645-4aae-9b08-738d5297eda9
Certificate serial: 010D0C9F4328584F31B51A468F9D9F0C9B231418
Authority key identifier: 90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/3afd7df1-6050-36f5-b7bc-2593f60eb7bf.roa
Signing time: Wed 16 Sep 2026 12:54:57 +0000
ROA not before: Wed 16 Sep 2026 12:54:57 +0000
ROA not after: Tue 15 Dec 2026 13:54:57 +0000
asID: 393949
IP address blocks: 2620:98:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:31:b5:1a:46:8f:9d:9f:0c:9b:23:14:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f639f2ac-d645-4aae-9b08-738d5297eda9
Validity
Not Before: Sep 16 12:54:57 2026 GMT
Not After : Dec 15 13:54:57 2026 GMT
Subject: CN=b459d98f-fe95-4622-b2eb-3ab1c0c3eb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:49:ad:2b:22:d7:51:fc:c7:92:0b:f5:60:
84:d2:41:83:60:da:90:42:30:03:a7:2b:2a:0e:c9:
d0:0c:77:c5:67:a5:d5:2c:9d:32:2d:01:d7:b7:c1:
2a:7f:3c:32:3a:8e:09:83:3f:e9:02:28:64:84:a3:
17:eb:53:a9:70:e9:bf:65:a0:68:7a:80:53:b4:9f:
8d:c9:36:5e:4f:ad:b2:ee:a7:1d:36:03:17:f6:2c:
b3:69:85:a7:47:cf:1f:02:98:b3:79:f6:08:d3:4a:
cb:cd:03:44:13:6a:30:68:ab:4d:51:f8:06:b1:39:
5a:85:2b:72:71:41:ab:0e:f9:01:e2:62:16:c0:ce:
1d:5a:9a:42:9d:1b:94:9f:33:10:4c:1e:64:b8:26:
56:d7:38:4a:ea:3c:ac:bf:80:b7:5c:71:e0:73:e5:
44:ac:ef:f2:72:71:b2:33:f4:3f:7c:4a:ba:41:c5:
aa:03:81:11:5c:78:47:01:df:de:1e:db:aa:bd:62:
ba:ad:fe:0c:24:fe:5f:72:7e:7b:5d:06:b7:8e:a2:
23:23:97:85:ae:ac:c4:01:47:86:6e:1f:de:d9:e9:
e6:69:94:75:50:45:3f:ec:2c:67:cb:58:7e:c0:cc:
6c:7e:9a:15:9c:8d:1f:bb:c1:f9:7c:e1:6b:8d:65:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:F6:21:2F:73:8D:9C:0A:71:AC:4A:17:5F:04:65:AC:AC:3E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/3afd7df1-6050-36f5-b7bc-2593f60eb7bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl
X509v3 Authority Key Identifier:
keyid:90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:98:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:f4:dd:fa:99:50:99:8d:b6:06:96:ec:f5:2b:aa:95:98:29:
1a:5d:93:a6:b3:43:f5:6d:e8:f1:48:ab:88:2a:62:d1:87:c4:
46:65:2c:e9:36:1e:83:ee:d7:50:bd:a5:6a:a3:04:ca:1c:a2:
c6:d4:9a:da:4f:37:f3:6f:c5:16:02:5a:22:2b:5c:69:4c:b7:
d1:71:fb:bf:f0:f9:00:c8:fb:0a:df:78:2d:99:00:9d:6c:c4:
e1:e9:1f:78:63:06:94:e7:1d:a5:05:9c:35:86:7e:35:2c:c4:
7f:3d:8f:a1:27:dd:2d:49:05:bb:b5:2c:2b:56:a8:a4:97:46:
18:5f:10:7a:7d:f5:17:fd:ba:b0:60:35:d1:e2:7c:97:6d:d1:
0a:9b:f1:5e:fb:42:55:1d:82:ac:8a:b9:c6:8e:c1:65:ec:65:
4a:18:ee:aa:ab:fd:60:2b:96:cd:c8:22:5a:61:84:89:b5:53:
af:c1:85:8c:2b:c0:20:00:0b:47:c6:d8:8e:86:23:92:31:58:
24:3c:5e:03:0c:b9:3a:cc:ad:e1:34:5b:45:56:07:13:62:02:
62:01:d1:eb:79:d0:62:88:5a:73:e2:ac:5f:aa:41:46:03:62:
f0:ea:6f:09:e0:97:d7:37:17:c9:13:00:2e:56:1d:fa:81:49:
f5:40:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:36:32 2026 by rpki-client