
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
File: baafe843-1100-3177-9505-bd29ba099cbe.roa (raw, json)
Hash identifier: 3Lsw7IH6GOWZXgy/0dRyv6YmUopmYuYb/pl5x6Sz3FI=
Subject key identifier: 3E:60:21:EF:A9:4D:66:5F:0F:52:7A:F1:F5:C5:B6:2F:72:EA:C6:7C
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584F4975265DD49903E16397E400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30103
IP address blocks: 2620:123:2010::/48 maxlen: 48
2620:123:2011::/48 maxlen: 48
2620:123:2012::/48 maxlen: 48
2620:123:2013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:26:5d:d4:99:03:e1:63:97:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cbf7b12a-6f8a-46f1-a663-462da04aabd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:b3:bf:e6:de:5d:dd:dc:4f:02:02:e2:ac:
e0:79:8d:99:9c:89:eb:b8:cb:76:8c:f8:67:ad:bd:
32:1f:18:21:be:fe:cc:17:22:b1:e4:84:cd:cb:ce:
83:bb:3f:62:dd:de:8f:1b:08:c0:c6:ce:97:71:51:
52:ff:07:5b:ef:b4:fc:e7:3f:21:cd:7a:c4:68:a5:
0b:cd:83:3a:b6:c6:d4:68:54:c0:9d:9c:9c:54:f9:
7e:93:37:d4:c5:96:80:ee:37:c4:96:de:45:8f:38:
5c:5b:93:af:b5:d2:7e:81:3d:83:ab:ae:cf:d7:08:
6c:65:69:53:d7:66:c4:be:cd:d3:34:6f:90:2f:f4:
08:b4:ea:99:24:55:d1:7b:7c:ca:8f:f8:ab:5e:8a:
78:46:e1:cd:8c:a8:d0:60:e9:fe:e5:20:b5:33:fb:
d0:2b:31:12:50:db:f5:f6:1a:20:5e:c5:ae:91:ef:
be:51:5c:46:40:bc:f7:6b:d1:51:ff:e4:e2:42:58:
03:ac:13:e2:f5:bb:e2:fe:35:46:ef:47:92:c6:b0:
a1:67:5a:02:33:b6:a4:37:ff:de:51:fd:fe:99:71:
bf:92:8a:d9:9c:53:1a:16:49:db:9f:8d:fb:e0:e4:
3b:b3:6f:db:3d:91:2e:28:25:e3:5d:8f:a1:08:89:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:21:EF:A9:4D:66:5F:0F:52:7A:F1:F5:C5:B6:2F:72:EA:C6:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:123:2010::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ee:b7:66:06:39:e5:79:80:80:18:1a:73:3d:7b:4b:1a:13:
ec:b4:f3:cc:ff:3b:57:d0:8a:57:2e:55:13:45:d0:85:37:07:
98:a9:e5:ed:ae:c4:73:0e:16:33:0a:41:d6:15:39:ee:85:a7:
13:34:ca:55:95:f6:83:09:29:ef:32:a9:33:66:4b:41:16:79:
c4:db:1d:c9:f0:aa:10:cd:c0:e8:4b:18:99:88:d8:4e:84:a0:
f2:93:3e:eb:35:4a:5b:e0:a5:93:9a:33:a1:bd:49:00:40:84:
8d:d4:34:75:7c:7e:79:df:d3:12:7f:13:42:31:7c:d3:5b:a8:
ad:b3:18:c9:8a:8f:80:bf:7a:9b:6e:38:eb:d3:7e:29:17:d8:
91:06:43:8a:bb:47:07:0a:cc:c0:2f:a6:7c:e8:3c:4c:8f:9b:
6e:e2:5c:6c:f2:e1:4a:62:df:09:16:21:36:6f:0b:a5:1d:c3:
08:e2:81:34:64:0f:51:e2:fd:95:b6:89:84:1a:ac:ef:04:17:
21:51:fd:4d:62:ee:8f:99:30:2e:11:8e:7f:9f:bc:64:96:5d:
1f:9a:24:1b:d4:d3:e5:6f:a4:46:e4:af:a8:82:fc:17:a1:a3:
b0:5a:c3:3b:e9:e0:1a:13:c3:b2:a4:ff:53:2c:aa:d0:79:20:
42:ad:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:43:14 2026 by rpki-client