
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
File: 0f107f23-47ba-363f-a704-3d575b31c8a9.roa (raw, json)
Hash identifier: SsUnL9OIrqyqMEYY8d0dhJ+smDS4QoaIXFVtBz/sZgI=
Subject key identifier: D7:DC:79:BB:C6:D7:F5:D7:4B:20:55:84:7F:54:82:54:C2:E5:0E:2E
Certificate issuer: /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial: 010D0C9F4328584F2D87BA2D0AC8035E3575A100
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 23122
IP address blocks: 2607:f558:800::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:ba:2d:0a:c8:03:5e:35:75:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=d49eb4a7-869c-4ac0-b5e9-e6dc344f7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:35:e8:65:e8:a6:22:6e:b8:41:12:35:28:
39:b7:a7:9f:a3:fd:13:d2:93:2f:49:d1:85:b6:1a:
6e:17:33:43:b1:38:39:99:a1:d2:18:d5:fe:53:d5:
3b:ae:a4:93:32:1d:8b:29:2c:62:b3:4c:20:a5:d3:
12:6c:b5:e6:8d:66:99:0c:ea:a4:33:6a:33:d5:bd:
0a:8a:2b:08:81:85:cb:67:d7:95:ed:23:c0:c6:a9:
98:9f:21:7d:c0:93:f9:f9:02:92:8f:0a:92:d9:62:
c7:7d:40:48:aa:9f:80:94:0a:b4:37:55:1a:8e:08:
26:a5:30:78:41:8e:58:83:20:0f:8e:1b:84:9b:6f:
75:6f:50:bd:96:a8:84:99:39:38:19:a4:24:85:5f:
d1:90:26:0f:e0:3b:a0:03:98:60:69:f0:ed:0a:38:
ef:0c:54:ef:d1:a3:db:37:03:55:e9:16:b7:97:2b:
b9:e5:fd:20:b0:61:a9:b8:d7:93:1a:d6:58:d6:4c:
ee:a7:44:3b:9d:55:4b:48:51:73:66:e3:f5:0b:db:
97:51:56:cc:f6:d8:d4:5f:a6:15:de:3e:3f:7b:56:
ad:fb:59:b2:a7:e6:d5:45:7f:a5:61:d5:dc:75:e2:
fb:6f:d2:a6:7f:9b:43:57:70:4c:0a:17:e4:ff:85:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:79:BB:C6:D7:F5:D7:4B:20:55:84:7F:54:82:54:C2:E5:0E:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
X509v3 Authority Key Identifier:
keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f558:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:dd:42:47:31:88:72:dd:1e:b0:2d:18:cf:63:3f:77:c6:32:
0b:ba:27:05:65:83:5c:d6:0b:0f:4a:51:e7:92:0d:72:19:29:
ca:d5:6e:87:8b:40:07:5e:09:39:4a:68:40:42:32:5f:ae:d8:
8b:56:c6:87:7c:77:b4:2f:f4:86:90:9e:17:99:68:ae:42:37:
3d:d6:10:eb:56:50:40:ee:42:32:38:85:ea:80:0a:3e:5f:7d:
6a:c1:86:c1:cb:16:56:be:33:0b:82:e9:80:04:3a:24:18:9d:
85:b6:b0:4c:52:f1:0a:f1:bd:04:01:f5:d4:db:a4:a4:a1:07:
4e:df:b2:44:4b:24:fb:54:ca:12:98:e4:f2:6d:e7:9b:24:b2:
27:4b:49:3a:8a:9e:a9:c5:fa:c1:63:0c:d6:fe:53:23:6b:26:
30:dd:de:7f:1d:28:dd:e9:eb:74:c8:dd:f2:41:55:ca:0c:98:
3a:d7:34:cb:b4:20:e8:08:44:0d:41:48:4b:50:72:68:e6:94:
32:c9:78:e1:bc:05:14:8e:a8:7f:87:8a:93:64:73:e8:67:d8:
5c:72:4d:d2:7e:9b:30:c5:0c:7a:4b:25:97:13:10:62:ef:59:
7c:c6:69:d4:75:aa:68:c2:2e:a2:ab:ab:c4:8e:92:27:63:66:
ba:f0:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:21:59 2026 by rpki-client