
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
File: d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa (raw, json)
Hash identifier: C4Gc/66uU/fpu3WHtxJjN7uOE/bggCJ+bNLy7ocrxoQ=
Subject key identifier: C1:D9:DB:A6:18:EC:51:F6:50:F9:59:F7:E8:01:05:8D:3D:86:B3:6C
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F4328584F1CC7A9A2EBEE6636EB31EB00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 396416
IP address blocks: 2602:fb78:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:a9:a2:eb:ee:66:36:eb:31:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=3b3fde57-d13b-4588-8da4-f97e4ef0e6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:b7:fc:a5:0b:bd:8f:e7:33:3b:23:b7:0f:
47:5e:1a:8d:d1:41:88:8a:8c:4f:8f:0a:2f:ed:85:
6b:a3:c7:cd:9e:b8:92:78:96:97:a5:48:7b:58:ad:
5f:8a:96:5a:ff:47:16:83:96:de:89:9a:24:f8:62:
9e:6b:c2:22:8e:51:2b:d9:a8:11:6f:5f:dd:20:ba:
dc:a5:49:5e:5d:53:1b:d0:22:ab:6c:0e:dd:fd:9c:
cb:12:34:28:63:08:8e:58:e8:a4:a8:b4:4d:c7:fb:
98:29:d5:d9:56:d2:27:49:05:b8:ef:28:bc:d2:1e:
f2:d3:0c:b7:56:e3:05:9c:a0:4d:75:f3:d0:25:fd:
0e:37:5b:52:d9:e8:1c:24:7f:39:b2:92:19:36:46:
da:28:a2:dd:ed:e6:69:96:38:5d:1f:b9:00:5f:37:
08:45:01:54:d9:71:cb:a5:43:f7:71:0d:91:c6:0f:
25:2a:35:02:5e:76:a1:c7:c8:72:2f:4e:36:f1:d8:
7e:8e:04:22:c1:eb:88:7b:40:a8:db:af:87:f3:8c:
20:95:e4:f3:6c:44:90:37:c2:23:f6:2a:8e:47:17:
c7:9e:73:82:c2:b9:82:37:64:ab:a1:e0:c3:1f:96:
20:bf:3d:58:ba:d5:6f:0f:50:db:a7:84:af:01:71:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:DB:A6:18:EC:51:F6:50:F9:59:F7:E8:01:05:8D:3D:86:B3:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb78:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:63:aa:97:3b:7d:7e:58:94:46:a7:de:bb:91:3a:7f:96:ed:
1c:d7:b6:be:20:7b:f8:01:f5:e6:7e:6c:bc:dd:9e:35:f1:fe:
ee:fb:6d:1c:9c:1b:e1:92:3d:a5:a8:21:11:df:e8:a6:eb:e1:
bd:8f:5e:b0:88:f7:17:86:42:1e:92:3c:9f:ec:ec:f1:fe:89:
8e:62:e9:e0:8b:cd:0c:7a:ef:01:ec:3b:ca:68:ca:c4:9a:70:
28:1a:e0:e4:3f:c5:ce:36:db:84:a9:f2:4d:6c:06:e2:0e:66:
a4:4d:c8:99:c1:11:be:c5:a5:cd:39:89:09:31:d4:fb:e6:05:
87:43:49:62:eb:5b:13:29:a8:65:29:86:46:8d:f3:e1:0d:10:
2f:f7:b8:30:9c:47:97:ef:51:43:ff:43:91:3c:d5:14:8c:dc:
99:a6:9f:71:ee:fb:99:ea:61:88:50:5f:25:d0:d6:18:12:51:
39:c9:43:f2:c9:d5:82:de:66:42:45:cb:56:4d:6f:b8:35:9e:
e4:bc:21:42:3e:cf:f7:6b:7e:80:86:68:b1:cb:66:4e:8d:47:
a7:a4:28:d6:8d:ef:61:0a:cf:fa:d6:af:08:38:e2:2d:75:2b:
52:89:bc:36:25:82:15:d4:f8:fa:f8:5d:1d:f5:ce:d3:c4:f0:
ef:9d:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:20:19 2026 by rpki-client