
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa
File: d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa (raw, json)
Hash identifier: D2DNDZPlv2tQWs8UHjvb0yWsqmIgstVTtjMCf4oDZdI=
Subject key identifier: 5F:89:90:14:1A:BE:A4:A0:70:66:B7:50:E7:43:12:53:F5:B8:81:79
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79BCFD50F0E8224BB9EBEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 2604:2d80:7880::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:cf:d5:0f:0e:82:24:bb:9e:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7a098283-2d76-4166-a2b9-1f481b02befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:98:d6:bb:db:99:20:33:dc:9e:da:ec:20:
62:4d:93:12:ed:3f:bf:e1:24:e4:0f:c8:1a:06:3c:
19:0e:54:a6:9b:bb:5c:a6:29:55:d9:2f:73:33:e3:
ae:d1:b4:fe:78:bf:41:9d:62:31:89:d2:4f:a3:e3:
7e:48:65:99:75:ed:1e:50:38:88:b6:3f:f5:37:2f:
37:3f:69:44:19:a1:8d:8f:7f:8b:83:9f:6f:c3:20:
b9:0c:c1:91:ab:6f:dd:8e:d5:64:c3:84:34:a0:c8:
e5:0a:b9:ba:e6:29:29:eb:2b:31:d2:12:75:67:1b:
5a:10:b8:da:b9:45:cf:fc:ec:79:73:bf:21:af:ec:
41:14:74:4f:4d:d5:1d:d5:0d:6c:a7:20:5a:16:53:
f8:d0:c5:a3:bf:2c:44:be:0f:2d:53:fc:ea:1c:61:
7b:43:b2:76:67:f5:3a:15:b8:fb:ff:4b:04:04:8e:
9b:25:20:b6:0d:f0:24:56:0a:01:14:f2:14:59:f8:
51:ce:01:ee:0d:ca:8c:52:db:be:78:73:6d:89:a9:
7c:56:56:12:19:54:6c:69:25:7c:b7:00:16:85:7b:
65:c7:bf:07:c4:51:d2:84:a5:36:cc:c5:97:66:50:
d3:1b:71:48:bb:d4:69:4d:f7:64:b2:f8:7c:8d:7f:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:90:14:1A:BE:A4:A0:70:66:B7:50:E7:43:12:53:F5:B8:81:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:7880::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:54:be:82:7b:03:89:a1:6c:09:df:99:8e:0a:98:76:86:e3:
ca:1b:68:68:b1:4e:e3:36:88:ea:94:5e:1e:19:2c:79:12:f5:
77:4d:60:ac:5c:a2:dc:76:04:00:6f:b4:01:43:90:dc:af:90:
f1:8c:ec:62:50:08:62:58:ea:f7:57:13:e6:22:4f:98:b5:0d:
80:fa:c4:f4:17:56:4c:36:f3:e2:60:a9:7d:2f:5d:b5:9d:1c:
0c:7f:60:62:7a:f5:55:e1:f1:80:f1:17:fb:0f:b1:f3:42:f3:
27:38:47:4f:4a:fb:77:0e:68:8f:97:66:8f:3c:9e:a5:eb:df:
6c:fc:d0:7b:2c:e9:d7:ce:f0:7d:4a:93:71:08:36:c4:20:f5:
ad:fa:c5:1e:b5:c3:12:d9:44:94:a4:63:af:cc:91:22:98:2a:
3d:60:38:5c:83:fb:45:52:b2:dd:aa:95:58:21:d4:84:f7:f5:
87:9f:26:38:32:10:61:33:b5:e1:fb:d7:27:b6:a1:4e:04:e2:
38:a1:ec:12:8e:ca:48:7f:29:b7:58:01:bc:29:a9:60:fb:2a:
d6:43:fb:6a:8d:89:f9:04:8b:c1:36:e7:96:b2:bf:4b:99:94:
ec:73:c2:70:74:f8:9e:e9:64:66:55:df:d0:27:01:f3:d2:18:
83:74:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:20 2026 by rpki-client