
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b09b130-74f8-3a12-bbf4-92e3acf443f3.roa
File: 4b09b130-74f8-3a12-bbf4-92e3acf443f3.roa (raw, json)
Hash identifier: f+ReheMc4JGTxtnY2xsjllIpoJ6u8WG9x8ioQRD9Q4w=
Subject key identifier: C6:F5:04:B7:5B:2E:DF:91:59:68:20:80:29:37:B0:43:72:3F:47:CE
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EE921EDC7889C75D3C9E25E98
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b09b130-74f8-3a12-bbf4-92e3acf443f3.roa
Signing time: Fri 21 Aug 2026 13:00:11 +0000
ROA not before: Fri 21 Aug 2026 13:00:11 +0000
ROA not after: Thu 19 Nov 2026 14:00:11 +0000
asID: 19905
IP address blocks: 2604:2d80:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e9:21:ed:c7:88:9c:75:d3:c9:e2:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 21 13:00:11 2026 GMT
Not After : Nov 19 14:00:11 2026 GMT
Subject: CN=1a3d59d9-0afb-4c95-8c59-d1b2f4adb00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:a7:c7:94:cc:e6:48:ba:52:7f:bb:a6:54:
c3:c3:cf:86:d2:ae:98:fb:f7:2d:ac:84:99:8c:8c:
d3:cb:62:8f:9c:c0:05:20:4a:5c:df:54:a8:81:af:
99:c0:15:e9:37:19:1f:aa:e5:1b:20:69:f6:be:5e:
57:f8:7b:f6:85:22:5a:7b:30:54:9a:52:93:75:08:
79:f0:cf:6f:22:9a:6f:51:80:67:1e:d9:c1:8a:dc:
37:c7:d8:99:86:83:fb:21:0c:48:ab:bf:4d:d5:5d:
39:45:7f:ab:81:e3:1e:c6:bb:33:e1:8a:8c:d5:3a:
5f:20:a7:a0:1a:ed:06:8e:65:5f:7c:8b:7f:1a:ca:
36:3b:50:98:3a:6b:9f:c5:19:af:95:86:e8:b4:94:
89:38:55:5d:0f:d6:c6:b6:64:77:42:9b:5d:5f:99:
23:cf:23:5f:ce:f2:01:21:a1:64:c6:72:7d:a9:b5:
b3:37:fa:82:4d:6d:d7:8f:af:d1:7a:e9:52:1d:5e:
87:35:36:97:05:da:ff:b0:b4:fb:ee:0b:8a:0b:45:
f1:85:e5:ba:ee:ab:c0:fe:0d:d7:b7:bd:2e:55:87:
b8:30:04:ed:d9:30:56:51:6f:a5:fe:d5:1c:76:43:
13:9a:6d:71:dc:87:22:4d:32:02:e1:3d:68:57:ac:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:04:B7:5B:2E:DF:91:59:68:20:80:29:37:B0:43:72:3F:47:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b09b130-74f8-3a12-bbf4-92e3acf443f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d0:98:80:a3:63:a2:6f:02:2b:98:b2:37:aa:f9:65:65:91:
2f:24:e3:e3:87:5e:68:6b:60:71:66:4e:5c:49:bd:79:c8:f0:
84:17:46:00:49:83:1d:8b:2e:27:db:25:90:98:03:2f:af:9c:
f9:6e:7e:31:1d:a1:41:52:c5:f1:16:b9:f5:2e:31:5e:1f:e3:
bf:94:eb:47:06:a4:de:d5:6c:af:34:82:79:f9:c3:37:09:93:
90:19:ea:de:b3:a8:a3:48:67:eb:c0:f9:35:72:ba:2d:ce:ee:
c2:2a:8f:c1:cd:2f:d8:60:24:33:3d:22:de:19:89:b9:01:91:
a6:35:c3:04:05:2a:38:d3:b5:35:1a:76:00:cd:b8:78:9c:fa:
ff:7d:7b:3a:2c:77:68:02:89:52:89:c8:d6:c3:1a:41:55:59:
64:c0:91:ca:40:97:8c:bf:f6:d7:f4:2c:00:f9:16:5a:9c:f2:
5e:3b:ca:19:81:3d:02:cf:32:32:83:f0:24:f8:15:e6:b8:e1:
bc:15:a9:54:9c:ba:f2:95:58:45:a5:27:fb:5d:6f:f8:f3:23:
7b:f7:9b:6b:29:89:d8:7a:bd:31:27:5b:c5:3c:f9:8b:84:61:
34:55:d1:c0:0d:90:b0:e6:e5:b0:a3:14:f7:07:95:ae:f3:af:
01:70:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:38 2026 by rpki-client