
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa
File: db7a7e43-55f7-38b6-985d-80324c326aa9.roa (raw, json)
Hash identifier: iC+ofnEyLsg5X0inPtnQ3s6oN7PIpwRofk7BSxOjdPI=
Subject key identifier: 8C:CE:DA:6E:5F:12:D7:4E:B4:CA:91:AD:DF:5F:0D:63:8B:97:2D:CB
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584E779A32F35FBFF6F9D186CD80
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa
Signing time: Sat 11 Jul 2026 21:00:11 +0000
ROA not before: Sat 11 Jul 2026 21:00:11 +0000
ROA not after: Fri 09 Oct 2026 21:00:11 +0000
asID: 204211
IP address blocks: 2602:f9f6:450::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:77:9a:32:f3:5f:bf:f6:f9:d1:86:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Jul 11 21:00:11 2026 GMT
Not After : Oct 9 21:00:11 2026 GMT
Subject: CN=8cfd171d-621c-40f7-bfe2-e29b55da49d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:64:e5:ca:d1:dc:22:0c:b0:4e:1c:c5:a1:
24:67:72:89:1f:94:43:82:97:e5:18:0a:03:48:47:
e3:17:65:08:91:e0:4e:25:21:c1:05:dd:70:3b:aa:
7c:0e:ad:36:dd:5f:1a:f2:2b:9f:c7:2c:3d:f2:15:
f8:cc:c8:e8:b7:b4:48:16:09:63:e9:67:09:5d:97:
06:22:30:85:d4:b2:e6:6b:95:f3:78:0d:6c:e9:37:
c0:4b:21:75:db:ca:3f:67:c7:1d:5a:ef:98:b9:08:
1d:63:26:52:55:a4:de:dc:48:cd:c1:a0:9d:20:a8:
80:45:14:10:5c:df:5d:6a:09:2f:75:18:6d:cb:9f:
74:cc:30:4d:80:4f:d7:6a:f1:24:fb:11:e4:f1:88:
97:5f:62:f6:69:a0:03:14:16:e6:00:39:12:b5:fc:
c7:12:cc:c0:a6:a0:8c:76:e8:57:18:7f:e8:13:3e:
be:1b:41:6c:ee:25:7c:c6:63:8d:05:01:bb:f5:60:
39:36:b7:86:90:14:fd:e8:94:a0:94:94:f3:f5:33:
06:f2:b1:5f:c4:41:76:d5:08:7d:69:7c:99:95:21:
2a:c7:a9:66:35:fd:9a:e6:e2:ce:91:5f:8a:5e:a7:
24:6d:61:c9:9e:13:45:a9:4a:7d:7f:31:70:99:13:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:DA:6E:5F:12:D7:4E:B4:CA:91:AD:DF:5F:0D:63:8B:97:2D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6:450::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8d:af:de:bc:49:0e:f4:20:e5:6f:ad:cd:79:05:8d:45:8d:
88:5f:9c:fd:40:e2:7b:e0:2e:fb:39:fb:1a:5d:66:44:12:5e:
63:6b:bc:19:62:90:7c:c0:ce:e2:f7:f5:9b:86:9f:a8:b3:a1:
e1:10:ac:e4:f0:d6:8f:96:e3:60:8b:85:30:13:ef:ce:41:43:
48:b2:d0:dd:4e:a3:48:f5:36:a7:60:03:d5:37:8b:ed:3c:4e:
bd:0e:59:cb:6f:2e:ab:65:2d:4a:02:59:a2:fc:a9:50:ce:38:
dc:6d:8f:47:a2:09:81:a0:a9:05:d3:1a:32:a7:1c:58:18:f2:
ee:b1:f1:98:3e:40:68:24:17:c8:6c:9b:f2:47:d1:da:c8:e4:
7c:97:64:7c:8b:49:99:e8:0c:eb:67:8c:49:73:1a:e8:a6:6c:
66:bc:93:f0:66:eb:bb:6f:24:5c:e2:2b:c6:68:25:ac:8e:3e:
47:24:13:71:86:42:1d:a2:31:44:9b:d6:3c:99:ca:bf:30:11:
a4:b7:96:d8:c9:fa:d4:cb:e3:05:9b:08:8e:4c:53:02:39:c4:
3f:a3:60:ca:f7:10:38:d8:01:07:46:56:31:b9:69:70:26:1e:
73:f3:ab:e0:dc:c8:37:d5:42:c8:57:ce:b3:df:92:fd:cd:49:
51:f0:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:02 2026 by rpki-client