
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa
File: dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa (raw, json)
Hash identifier: 3ZzPgO3cPdVLBFTE/TZLaJCBNU0D/pDZceEe2VBrOsw=
Subject key identifier: 03:9D:D1:A4:73:22:02:D0:95:78:0C:2F:0B:1A:4C:4B:3D:2E:21:FD
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F4328584F0ED23545946479309129D780
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 3477
IP address blocks: 2601:a013::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:35:45:94:64:79:30:91:29:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=82bd70dd-208f-4396-a2b8-579aca6b67ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:cd:d5:c8:56:d7:46:15:7c:72:6a:45:c8:
82:05:03:e3:e6:6e:39:7f:c0:12:6e:c8:9a:5f:56:
a2:bf:1b:ac:19:7b:e6:ea:24:fb:78:ae:61:4e:a8:
0a:a4:f5:bb:db:5e:f9:68:e2:48:28:71:a1:7b:4e:
e3:5d:39:00:fb:0b:2f:5a:90:f4:e5:6c:b5:a8:fe:
f1:ef:4a:4c:15:7c:88:b7:8c:30:46:92:fa:3a:7d:
d2:28:b4:33:23:90:05:0e:c3:e3:64:27:32:6b:d4:
bd:30:c0:a6:ea:1e:d9:2c:97:13:22:52:78:61:00:
f8:5b:5f:5a:ac:7f:a8:33:1b:92:6e:df:28:46:f6:
f5:6c:ba:b2:74:2a:81:c3:43:96:0d:28:a2:6d:37:
72:56:b1:39:c0:c2:62:d9:f2:8f:62:c3:ea:5c:b1:
e3:0d:71:c5:70:83:57:8c:2d:c6:c4:da:7c:f9:d6:
08:92:3e:7e:3c:d4:89:d1:e9:76:9e:72:f6:34:c8:
bb:56:1a:de:a4:08:9c:24:92:79:19:99:12:c6:53:
43:58:7b:31:62:9c:6b:39:6f:5a:93:0a:fc:fb:3d:
51:0a:46:3a:d4:ed:ac:ee:bc:65:72:0e:9a:9e:d1:
75:b4:b6:be:6c:91:34:0a:9b:5c:b6:69:f9:2a:e8:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:D1:A4:73:22:02:D0:95:78:0C:2F:0B:1A:4C:4B:3D:2E:21:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dc3c5dcd-faad-3b07-a375-e7e2db7f8385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a013::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b2:b5:fd:e3:5b:98:bd:29:c8:37:ca:c1:a2:52:13:81:24:
68:47:1f:5a:d2:ae:93:32:3a:64:14:ac:27:cb:74:91:60:94:
f3:6a:91:4d:88:dc:24:55:51:bd:c7:b6:8f:3d:18:4f:20:c3:
7b:8c:f3:5d:05:c8:36:ef:25:73:e8:3a:d8:62:dc:3c:29:bf:
8a:a5:a1:db:69:7e:b2:e6:d4:74:75:19:e9:34:55:ac:40:92:
ec:15:f0:7b:b3:f0:95:f9:56:d8:95:47:2f:39:3e:0b:42:f8:
8e:9f:45:52:eb:13:69:05:55:85:8e:bc:bb:05:b7:63:3c:45:
a2:7b:a3:d8:ca:bc:8e:2a:b4:93:47:08:bc:d4:c8:c6:01:02:
52:0d:3d:d8:43:54:d0:66:18:57:dc:af:4c:b5:e5:17:96:77:
ed:35:28:0e:79:6f:b8:8b:ca:f0:89:f9:a6:55:f8:ca:e1:64:
22:f5:66:c1:8d:f0:75:d1:a5:49:53:ef:dc:d0:21:02:36:cc:
fc:c4:bf:29:59:6a:8d:e6:8f:24:29:23:6a:c8:f3:4b:6a:0a:
60:03:78:24:f9:04:4e:6f:c4:49:47:9a:c4:ff:70:b6:d8:fd:
58:6d:39:83:79:e6:df:1e:cb:c2:47:a1:be:68:00:f0:8c:68:
17:e5:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:28 2026 by rpki-client