
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ef4034-d119-3a02-b167-93dfe78edc98.roa
File: a1ef4034-d119-3a02-b167-93dfe78edc98.roa (raw, json)
Hash identifier: ldHXw0rY3ed5ac/kuQpJzHKEqjPUzFLbzjJS4qJHkGE=
Subject key identifier: BF:62:F7:68:BF:36:3B:7F:B2:31:2F:02:63:5C:9D:1A:92:61:1E:D1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F20F7D40EE335A73D030ECF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ef4034-d119-3a02-b167-93dfe78edc98.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 30036
IP address blocks: 2604:2d81:80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:d4:0e:e3:35:a7:3d:03:0e:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=567a121e-953a-4a92-be93-f5e65b10336e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:6d:89:39:c3:55:80:d0:8a:24:73:fe:d1:
f5:15:d0:e3:c2:76:6b:b1:5a:c5:b6:6c:22:3d:d4:
b9:e8:8b:54:75:17:29:c4:50:33:03:f3:25:01:98:
09:a5:c2:9d:14:65:0f:e3:d0:23:fc:cb:30:b8:2a:
98:33:e1:19:0f:65:81:fc:62:66:e1:e2:06:70:45:
d5:dd:3f:df:30:36:26:57:79:c5:43:f9:cc:c6:62:
63:0b:35:0f:55:3a:01:e4:ca:13:e6:da:09:6d:fe:
03:e6:72:68:30:b2:63:c1:f0:e3:d0:ee:28:3e:42:
a9:7a:4c:76:f0:55:1f:a9:9a:9f:7f:7a:d3:fd:e1:
61:ba:67:05:74:5a:b2:a0:13:84:6d:70:e4:a9:97:
21:de:ab:57:9e:4b:1c:db:4c:fd:10:9c:b4:cf:d1:
43:c3:65:89:2b:e6:76:ca:92:18:f9:99:e1:3b:81:
64:ff:4d:d8:4c:30:f3:4e:05:cf:86:22:a0:69:c3:
9e:6a:f6:d1:7f:c2:ef:37:4c:a4:4c:81:4a:a5:17:
d8:2a:d6:18:54:ef:f5:5a:1d:c3:48:d0:a0:73:df:
8c:63:3c:e1:49:e7:21:81:ed:f7:84:67:1c:37:5c:
1c:f3:7e:1f:94:ef:23:b6:33:7d:b0:03:85:e9:3d:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:F7:68:BF:36:3B:7F:B2:31:2F:02:63:5C:9D:1A:92:61:1E:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ef4034-d119-3a02-b167-93dfe78edc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:40:be:19:49:0a:25:5f:18:ab:95:ff:c3:5c:72:6e:3c:7d:
22:c1:7a:dc:1f:09:ac:38:47:07:c4:03:db:6d:21:08:1a:fc:
71:75:3c:10:6a:58:c2:9f:be:61:c0:3a:a2:96:79:66:7c:59:
35:64:c2:21:a7:a5:2e:64:6c:01:2b:be:00:fb:ad:84:65:3c:
d5:0b:66:f4:5f:55:ba:75:56:83:bc:75:44:8b:65:26:67:c6:
9f:b4:2d:23:c3:b3:fa:df:5d:d9:cc:05:fd:b9:bb:95:a0:e9:
ce:c8:c9:d5:48:be:c5:c9:94:76:4b:b9:10:99:31:ea:40:61:
0c:e2:c8:53:37:b0:56:e7:9c:4a:31:f6:76:3b:5f:4c:80:2c:
1b:b1:be:1a:0f:d7:5b:55:bc:3f:58:22:45:9a:2c:06:0b:9f:
54:76:54:e4:25:b1:85:47:d8:7e:68:99:50:3b:23:09:b4:67:
a7:de:0b:43:7f:c8:2b:ed:c1:6b:05:97:d7:3b:00:da:96:a9:
d9:86:b3:19:a4:29:6f:81:d8:46:69:f0:fa:fb:60:b0:8e:45:
3e:80:a7:45:d4:dd:10:50:6c:bc:f4:d0:0e:41:f3:09:6c:1d:
ea:13:90:cd:d5:32:92:d9:97:f7:3e:1e:52:01:c6:0a:60:5e:
08:a0:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:43 2026 by rpki-client