
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa
File: 8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa (raw, json)
Hash identifier: jvl/DI+xEwDUgZJW7OKODaMC5Jncggh1wczpeNGGf9U=
Subject key identifier: 31:7F:62:2A:14:AC:67:2F:DA:BE:13:F5:BC:0A:73:8D:6A:6D:18:D2
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584F5E62BC64D46433BDC360AF80
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 5744
IP address blocks: 2610:20:5020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:bc:64:d4:64:33:bd:c3:60:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=5934ac7b-16ee-4b17-a078-83dc12c57dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:cf:d1:4b:50:ec:6e:7d:f8:c7:d1:fc:f6:
6e:bc:88:e5:d4:23:0e:6b:e2:58:f3:8b:1d:60:b1:
70:db:c7:70:fa:f6:60:8f:99:d6:a5:d8:fc:c6:41:
47:d7:8c:45:e9:3c:a1:d3:67:81:bc:d1:7b:37:cf:
63:e9:59:2f:3a:af:48:be:ea:8f:eb:4f:30:f5:6e:
b4:af:b2:29:4b:98:34:ce:91:5a:62:ab:35:67:5f:
7e:61:59:d1:a5:3b:6e:bc:8c:73:0b:66:18:9e:ee:
1f:2f:83:63:c0:d5:27:b1:d9:91:d8:b5:f7:83:6e:
65:80:48:33:85:f3:49:29:91:e3:2d:e6:1d:78:43:
ab:3d:f2:2f:88:8d:50:6e:7e:af:ea:25:47:8f:0b:
16:e2:1b:fe:99:8c:a1:2b:32:98:79:fe:96:29:ae:
92:79:89:9c:94:6a:2c:43:38:cf:1a:0c:c1:9c:18:
43:8b:08:c1:7f:f4:ee:85:92:6e:2f:41:58:00:82:
dc:0c:6b:bc:16:a7:d6:b6:03:8d:46:7c:c9:b6:bc:
19:d9:d8:0a:5d:7c:c2:3c:1e:bd:d2:13:0b:66:00:
ae:69:69:2f:90:a4:d5:e7:ad:0f:c2:06:a1:fe:fb:
f1:6a:8d:cd:26:aa:7c:37:1f:c4:70:2b:f9:92:40:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:62:2A:14:AC:67:2F:DA:BE:13:F5:BC:0A:73:8D:6A:6D:18:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:5020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4c:60:9b:ed:25:3b:93:1f:47:61:e9:5a:8f:bb:05:7e:cf:
e4:95:2e:72:6b:71:7e:f4:c7:b1:3c:e3:64:36:7c:12:8e:9e:
e7:96:e1:b0:6b:cd:ff:2c:1c:ce:ee:b4:de:a8:5c:0e:a8:05:
44:ef:54:0f:f3:87:ed:44:87:06:cb:39:28:3d:cc:c1:92:b2:
e2:e9:8a:c4:f4:23:b5:b2:89:96:4a:ae:f6:6a:6f:60:c0:b9:
cc:9d:76:fd:27:61:5a:96:d3:76:20:53:c6:dc:38:99:35:22:
aa:d1:20:d9:37:a1:bb:ab:50:98:3c:52:c6:56:41:3e:f4:3f:
d5:0d:82:d3:74:11:37:71:aa:34:b3:0a:e8:5a:08:af:f5:67:
72:c0:b1:c0:c7:83:15:fd:01:0f:00:f0:79:f3:d8:40:17:81:
fb:21:d9:2b:27:06:7a:14:b5:9e:22:22:84:60:46:57:ef:db:
f6:82:9c:9f:d2:91:8e:ce:8a:1e:ad:25:d0:b7:91:27:90:4e:
07:6f:14:0d:64:3d:95:ca:37:8a:45:0b:88:47:16:bf:c7:7b:
90:ec:c8:a3:92:d2:9c:b0:da:0a:7e:1e:02:9e:cb:23:4b:59:
00:c9:51:70:fd:9a:cc:e1:94:46:b2:e1:80:3d:9d:73:b3:56:
72:b7:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:49 2026 by rpki-client