
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
File: 7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (raw, json)
Hash identifier: DGmVQuSOSQBA+HIc/B8s5HEcEHIDcCmxnhGOmSgRa4I=
Subject key identifier: F3:3A:84:5C:BC:79:21:D0:EE:8C:03:D2:13:74:46:C5:5D:2B:B5:50
Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial: 010D0C9F4328584F4976C56658951BDC67F97870
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 46450
IP address blocks: 2606:3580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:c5:66:58:95:1b:dc:67:f9:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=678d0e5b-f8ab-4773-b655-3919ffa0d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:95:69:15:1c:f6:4b:af:d7:69:5c:a9:ae:
19:8b:dd:b8:ce:ef:ed:e1:2a:48:d3:0b:6d:70:21:
50:24:96:02:f4:a0:35:67:ec:eb:a2:7a:f8:c7:ee:
b9:e2:6d:26:9c:c2:c8:3f:1b:5f:11:66:fb:21:6d:
b9:6a:87:be:2c:91:4e:f4:8c:53:f2:d1:b1:aa:80:
24:c1:07:90:a3:e3:da:f8:34:14:7a:1f:2b:cf:48:
b1:2a:f0:27:37:e5:36:2e:95:64:0b:eb:0e:38:3b:
03:09:11:fa:47:de:88:20:4e:f2:18:e9:a5:f3:16:
75:01:fd:a8:e3:a7:44:fd:1a:bb:bf:43:5c:36:5d:
db:70:d2:c4:c1:1b:a6:5f:fa:35:5a:bd:39:ca:d6:
37:e6:8f:8e:3b:e3:31:d9:a3:a4:3c:58:3f:35:6f:
e9:3f:78:4d:e2:63:5d:1a:5c:25:71:23:ea:7c:e4:
1d:a5:2d:57:ca:45:21:1a:4f:3e:74:c0:a0:20:02:
27:3a:d4:64:3b:33:b4:e3:fe:86:86:b6:05:09:14:
7d:f3:40:a1:51:32:0b:6c:08:b6:65:bc:e1:25:05:
2e:d4:2c:18:86:b4:eb:32:39:b1:08:9c:66:52:0b:
57:48:c2:6e:d5:26:d2:b1:d5:a8:5b:3d:09:24:03:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:84:5C:BC:79:21:D0:EE:8C:03:D2:13:74:46:C5:5D:2B:B5:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
X509v3 Authority Key Identifier:
keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:bc:e2:b9:d5:52:16:a8:87:2c:55:a3:3c:40:0f:51:6b:8d:
68:05:6b:30:51:0b:05:0a:1f:ff:3e:f1:42:ba:f1:66:26:b4:
90:f7:84:7d:4a:7f:e8:05:e1:9f:c5:b2:71:59:00:73:60:2d:
a5:ee:75:69:ea:bf:d4:35:da:6e:35:b3:80:7f:9c:67:86:b4:
8d:dc:d5:29:c9:7a:1b:5e:3d:b3:d8:87:17:57:42:b2:9a:d1:
64:45:9d:7f:5d:6a:a8:60:dc:b9:8b:58:e9:c7:68:45:c2:d0:
7f:22:d4:cd:bc:83:24:7c:97:e1:42:b1:ea:8d:40:40:03:91:
8b:a0:db:dc:e0:6d:a5:b5:08:52:cf:8e:ea:36:9b:1e:89:3f:
03:7a:8a:9e:6f:d9:e1:8a:63:2c:83:97:9b:9b:95:3c:f7:69:
9f:b0:66:49:68:0c:a2:90:ef:40:c7:10:38:3c:a7:5b:f6:8b:
ef:46:bd:c0:09:de:70:f1:5f:80:28:95:b1:6e:3f:f2:35:ed:
07:be:bc:e0:a6:7d:f1:62:dd:51:8c:30:06:0f:d6:c4:58:38:
57:09:cf:30:f7:a0:44:64:0b:db:d2:25:c0:75:a8:c3:67:4c:
a7:52:bb:97:e3:90:06:4f:e1:70:72:10:ae:ad:b1:ac:d2:1e:
2c:78:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:59:54 2026 by rpki-client