
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
File: bc36308e-607f-36db-982f-4ca4d4f2788b.roa (raw, json)
Hash identifier: YzbgTCneDJfnnRhw6LY16BjPJtZShLs/dbMbo6fnUU0=
Subject key identifier: C8:50:19:45:07:1C:06:29:98:EB:03:18:99:9F:33:79:03:8D:00:57
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584EED52028B7CEEF7C5FD0B6580
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 1403
IP address blocks: 2600:d400::/28 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:02:8b:7c:ee:f7:c5:fd:0b:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=263ed80a-94df-4b62-9c95-17d65d8f8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:64:71:b7:f6:b9:04:6e:58:a2:bf:ba:a9:
5a:96:1c:bd:96:74:7a:1e:55:d8:bb:c7:01:4c:4e:
dd:39:b5:85:ed:9a:97:7c:0f:89:3e:e0:07:6e:3c:
66:48:53:3b:9f:9e:7d:e9:49:ff:53:c3:65:63:9c:
4d:c6:d8:3f:39:e0:b6:f1:04:ac:60:f6:66:08:6d:
60:48:e3:2b:7a:0d:d0:55:2a:8d:19:57:5e:65:87:
fc:9a:c6:dc:d1:fb:25:fd:df:a0:bc:c8:40:3e:cf:
ce:bd:a4:d0:ab:22:96:7b:0f:73:85:97:73:05:25:
46:aa:15:72:eb:7b:22:a2:ba:8b:5f:a4:38:79:47:
0f:df:21:09:63:51:c6:ff:72:4a:68:88:6b:ad:2e:
6c:31:45:7e:ea:7b:0d:52:b4:23:3e:c5:d2:77:7f:
b2:d1:63:14:80:21:7b:ed:07:a6:ee:92:a4:98:af:
f6:0f:06:0d:de:23:92:31:e2:c9:80:9c:a2:b4:8c:
e4:fb:01:4b:b8:7f:8c:ac:ca:fb:1a:dc:61:5e:1b:
c9:11:6c:9c:ab:e7:79:d0:1b:94:a8:a2:fa:02:f0:
31:27:ef:0f:83:76:21:15:cd:d5:ce:ae:ac:01:cc:
55:54:58:b0:86:2c:86:69:cd:d6:61:40:f0:c1:fa:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:19:45:07:1C:06:29:98:EB:03:18:99:9F:33:79:03:8D:00:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:d400::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e4:2d:9e:cb:47:5d:19:fa:1c:8f:55:e8:7f:02:3d:b9:bf:
85:bc:38:37:3d:9d:d0:13:bf:03:37:65:55:78:d1:09:60:f0:
7f:fe:8b:33:e7:35:1e:02:46:db:df:73:6e:a4:3d:fe:20:26:
3c:bd:24:28:4d:87:a7:b8:6b:c7:39:30:75:0c:ac:22:a1:4b:
b3:27:ea:2e:9d:53:83:99:8a:47:61:78:19:b3:83:b7:81:23:
d6:cb:16:bc:d3:42:f2:b3:2c:5a:d6:c2:f8:34:5f:57:af:e2:
27:4d:ec:87:5f:2d:3e:bb:be:ba:fd:42:22:d0:7e:14:92:b8:
5c:cf:0b:6a:dd:46:ad:6f:b4:04:25:72:ad:fb:cb:db:00:b7:
66:76:1e:d5:71:ec:d3:a9:a7:dc:78:91:82:dc:00:47:ca:71:
98:b2:90:24:0f:a6:ce:c7:bb:9c:cd:99:30:ad:95:8d:be:28:
37:3d:58:dc:66:0f:3f:73:f5:f9:72:6c:ca:54:1c:7c:73:8d:
2b:48:37:6a:43:78:de:c1:4a:13:cd:9a:e0:f2:f4:00:5e:2c:
28:0a:07:c7:d5:57:3e:73:fe:17:91:49:c3:63:78:a7:00:a4:
3f:72:eb:9c:69:02:77:e8:25:ac:d0:7b:9f:ad:30:7c:64:6b:
3f:4a:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:38:55 2026 by rpki-client