
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bb0792-5682-3deb-a57a-edf538afc402.roa
File: d9bb0792-5682-3deb-a57a-edf538afc402.roa (raw, json)
Hash identifier: Unl1dZsrwfPrxVMdM31Sg42oleyrwJuMiPWXiYlpDbQ=
Subject key identifier: 00:2C:7D:CE:E6:99:EF:99:03:B0:A4:A0:30:97:AE:41:DF:7C:59:89
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F498B3D288F759D72E41B1080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bb0792-5682-3deb-a57a-edf538afc402.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2d80:4f00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:3d:28:8f:75:9d:72:e4:1b:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=622299a9-01c7-4656-a255-f54fa13a0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:4b:6a:55:37:46:d6:6a:a7:cb:ee:10:d7:
04:7d:5a:0f:37:50:0f:38:87:c2:2a:6f:8f:7f:05:
cc:31:46:08:04:8e:8a:a1:ac:f8:ba:ab:47:68:67:
e0:b4:71:a8:9c:5c:97:5a:9d:23:a7:72:02:ac:13:
f2:b3:df:e5:aa:79:26:49:01:4d:ee:0c:40:25:c2:
46:3e:12:f1:33:0f:7d:d8:e3:de:88:d4:f8:6b:e1:
17:36:e8:e4:05:b6:fe:8a:68:83:98:8b:85:bf:63:
1e:56:4b:02:65:dd:39:27:52:09:43:71:b4:eb:cf:
e3:31:cd:d6:b2:07:c4:20:3b:2a:a4:ac:b8:2e:78:
2b:94:97:1f:65:65:2a:45:8f:c0:19:7b:ba:ef:5f:
ba:88:00:06:8c:d8:45:4c:45:d5:9f:a4:41:0c:80:
b0:38:e5:86:64:45:19:0f:67:a2:dd:a1:71:70:a9:
63:52:88:e5:56:a5:0b:b3:f6:31:96:17:e8:be:bb:
47:35:b0:f0:08:c4:74:64:01:19:40:1d:50:b6:79:
7c:be:d4:19:80:9a:00:08:80:63:a4:2f:15:df:9d:
1e:47:c9:83:98:42:43:ad:b9:56:80:6f:15:04:06:
10:19:7f:82:7b:a4:06:43:2e:f3:f3:e6:f5:6b:a6:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:7D:CE:E6:99:EF:99:03:B0:A4:A0:30:97:AE:41:DF:7C:59:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bb0792-5682-3deb-a57a-edf538afc402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:4f00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ec:77:7d:dd:38:dd:9d:70:c4:c3:55:aa:56:de:4f:52:43:
83:16:94:18:03:e4:d4:38:1e:dc:0c:d4:64:9a:79:c1:8a:23:
63:b3:fb:93:a1:82:f5:2b:bb:3a:3e:f4:78:5c:38:b4:67:68:
36:47:c4:07:01:ee:ae:89:49:cb:b0:ea:88:f2:c8:56:e2:eb:
8c:e6:fb:3a:93:b8:02:86:f6:6c:31:92:79:1a:b1:c3:c4:22:
a2:79:74:61:6a:8a:13:60:82:4a:b7:47:b3:ea:59:29:dd:37:
80:35:d5:89:f5:18:43:0f:98:e4:cd:25:a9:66:56:29:75:13:
62:e4:5e:bf:fb:bf:b3:dd:8e:7d:f7:40:58:7e:56:61:1e:fc:
92:79:13:03:68:52:17:ab:20:78:92:12:ca:0b:c3:93:18:3a:
a4:bb:00:9c:b3:3e:f8:1f:6c:d7:d8:68:72:24:77:ce:ce:15:
58:ac:2c:bb:7f:36:9b:74:f3:31:85:0f:30:a3:a8:d8:1c:0b:
da:e9:d7:e9:73:64:72:b9:6e:3f:9d:0f:e0:10:2e:aa:2e:64:
67:c6:f1:ee:b1:d4:32:dd:77:7d:1f:3c:b3:ce:e5:2b:0f:55:
26:bc:c7:2d:75:76:dc:c9:d2:5a:d2:78:9f:75:6a:4e:18:7c:
64:bc:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:27:04 2026 by rpki-client