
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
File: 40d97b3c-f694-318a-8402-3f17bc873953.roa (raw, json)
Hash identifier: ZZA+RVGuw0+w8Q6lhMCsQBT6tQqJi0ImlOT/zVBIp/I=
Subject key identifier: 1C:A6:90:84:4D:89:F3:11:DC:2C:79:E9:86:56:8B:23:98:A1:04:AF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F2D87CAD3955A4E36C3BEB880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 2600:1010:b010::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:ca:d3:95:5a:4e:36:c3:be:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=d4ec8aca-f923-4a19-97ea-12eea599bc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:05:f1:4c:e1:6c:39:13:34:04:ac:22:df:
f8:a9:f0:96:86:ec:58:15:c2:3a:aa:79:5a:3f:b9:
3d:4f:91:52:07:c2:fc:e8:14:70:94:48:bc:a5:ff:
1e:ca:67:15:57:49:d0:c1:3b:0f:1c:69:14:c0:7c:
c1:d1:a8:71:2c:57:48:ca:f0:b6:1b:8d:a7:00:f5:
9b:17:6a:c2:9d:be:19:9b:9e:44:14:6c:c5:d5:64:
58:be:cf:0d:f0:4e:47:57:c5:93:09:19:f7:5e:30:
57:49:e6:f3:e5:94:9b:ef:89:79:79:d5:d7:59:fd:
3c:54:61:fe:5c:1c:f1:df:2b:a4:4e:97:f6:21:75:
c2:db:08:b5:b0:47:2e:68:ad:66:8b:0a:0c:40:dd:
fc:6f:10:42:a1:b4:56:1f:34:1c:9b:b4:71:81:00:
0d:b8:6c:14:87:da:6b:c9:1e:bb:a8:79:88:5c:85:
60:82:0d:8d:4d:8c:32:83:d0:e8:56:ba:a1:e7:04:
df:2f:da:73:d2:3c:26:f4:7f:58:db:0c:11:de:94:
c5:8d:db:97:42:bc:92:e4:5f:b3:31:ba:b8:83:17:
81:4f:54:a8:37:08:c3:1a:1e:ea:4b:6d:90:a9:b6:
16:ba:a5:20:54:be:46:1d:8b:a1:88:45:1a:c2:09:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:90:84:4D:89:F3:11:DC:2C:79:E9:86:56:8B:23:98:A1:04:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:37:b1:39:24:57:5a:f9:90:8b:40:18:14:7a:46:53:81:38:
7b:a2:4d:09:75:24:1b:8b:4a:bc:c6:80:2e:39:5e:c3:3c:15:
5e:35:52:b9:c7:7d:4c:db:5d:7e:88:20:15:c3:54:81:e4:64:
31:6f:5c:92:69:e6:b1:72:00:40:7d:1d:df:64:60:d9:67:31:
b1:26:75:8a:a4:34:45:ec:78:e1:b5:55:e4:b0:5e:b8:2d:de:
c0:69:9e:1e:d2:cd:08:43:7a:c3:92:49:bf:2e:cf:db:0e:64:
97:67:f2:bc:13:a7:ef:86:0a:00:68:7a:3a:21:90:1e:a8:05:
cc:e7:20:49:74:b0:9e:bf:04:6b:82:0c:55:91:31:ff:7a:62:
07:41:87:af:6d:be:34:0e:d9:16:1b:22:13:e9:8e:67:79:33:
81:0a:80:f1:e3:10:49:40:67:2a:d9:4e:04:d2:b4:17:5e:83:
c3:31:f6:45:e6:f3:d7:7f:b8:1f:25:a2:c6:d4:2e:5d:6d:08:
63:90:d5:5c:de:14:4e:6e:ce:c8:2e:68:3a:e5:ce:1b:dd:e3:
c7:62:17:34:2d:bc:65:79:c6:1a:1a:a4:82:28:54:91:22:20:
e0:6c:83:9f:68:7e:ae:7a:9f:d0:0a:72:f8:94:2c:07:dd:4e:
da:bc:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:04:23 2026 by rpki-client