
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
File: 8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa (raw, json)
Hash identifier: 2qAc1C1kmBFtY9Z4/EbQXHs3LQWC/K+KldhTtm5FMv8=
Subject key identifier: 7D:65:93:90:12:85:C1:60:0E:48:9B:A9:29:28:69:FC:47:CD:74:FD
Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial: 010D0C9F4328584F2347453B7F0326B57D6C01F0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
Signing time: Fri 11 Sep 2026 08:52:21 +0000
ROA not before: Fri 11 Sep 2026 08:52:21 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 4181
IP address blocks: 2604:ad00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:47:45:3b:7f:03:26:b5:7d:6c:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
Validity
Not Before: Sep 11 08:52:21 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=09ccbd89-e40b-469d-b298-5df7c107afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:51:f2:63:64:8b:25:ce:7f:3f:c1:05:c8:
75:11:42:23:f8:4e:21:e7:23:ce:60:68:c5:89:d7:
fe:8d:72:b8:c6:f7:18:e3:b3:0f:af:20:0a:46:16:
4b:16:ae:05:9f:34:4d:c3:5b:5e:ec:c6:db:26:d8:
d7:16:55:7b:64:07:d4:13:03:75:5d:86:34:34:c2:
f5:96:a3:eb:21:2d:c6:ef:aa:42:03:c8:67:88:91:
20:6a:d3:1c:cd:05:3b:f6:88:a2:3a:7a:a3:84:0c:
de:2d:54:cc:6f:b6:2e:d2:20:81:ef:b9:d3:2e:38:
7f:4d:60:64:31:7c:38:1a:b5:49:db:04:26:eb:0c:
4d:bb:34:09:c2:48:23:c3:86:f3:33:c2:49:bf:c5:
b3:b3:cc:68:3e:7d:a3:28:92:c7:f2:14:4f:a9:6f:
bb:c9:d8:15:7a:9c:a6:e0:26:fe:d6:ba:3f:c5:59:
3b:32:94:88:91:64:f0:18:f9:d2:b6:c1:fe:b6:32:
a0:8e:5c:3d:00:cc:3e:21:4a:1d:34:72:41:30:67:
ac:fd:89:3b:65:a3:69:e4:42:6c:60:b7:12:c1:7c:
63:49:4a:d7:6f:c0:d6:92:0d:93:6d:77:b7:34:32:
dc:66:41:b4:36:a6:36:59:3c:19:f2:a7:7f:6a:a3:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:93:90:12:85:C1:60:0E:48:9B:A9:29:28:69:FC:47:CD:74:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
X509v3 Authority Key Identifier:
keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ad00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:2d:b9:d0:29:bf:64:a4:57:d1:00:f0:3b:e0:f9:a0:e1:87:
34:04:3f:c6:67:b8:05:c4:23:2b:b0:7d:fc:65:10:4e:05:c5:
cf:2f:14:b9:20:00:78:33:c4:05:a6:65:0f:95:78:74:28:26:
f6:c8:41:87:8f:05:da:b0:f3:a2:bb:be:0c:18:92:a0:cc:46:
fc:76:09:d7:d4:26:32:17:5d:1d:20:bf:df:a4:1d:9b:27:01:
9b:d0:82:f6:13:3d:8f:e3:70:b6:7c:06:ec:97:f3:b9:2a:db:
cb:fd:a4:65:ff:ca:6b:65:b5:e2:d6:69:e4:bc:91:bd:2e:a0:
5e:a7:f6:86:e5:9f:54:23:4e:72:2c:06:58:2e:65:c5:c8:5b:
2f:f1:03:d1:04:3b:07:0b:57:b3:f5:00:b4:b8:19:3e:ef:31:
40:4a:d1:cf:f2:d4:16:2d:75:b6:3b:29:33:84:cf:96:bf:08:
d2:ea:99:84:ae:11:08:e2:66:a8:2d:f8:61:c1:48:41:e6:62:
56:1f:84:6c:5c:cd:4c:d6:41:68:e2:ba:4e:8c:ea:b0:f0:b7:
d8:d8:6b:21:3a:41:cc:77:20:96:5f:f5:9b:4b:1f:b5:7e:b1:
69:5c:1e:db:96:0a:25:93:00:c4:87:85:dd:15:a3:d4:63:47:
6f:1b:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:49:24 2026 by rpki-client