
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
File: f8cef0a4-a68f-347b-bee6-17972ce290a9.roa (raw, json)
Hash identifier: lvm931u19prRKpKPTqAVHMK8+adWCI+PQYR3tN0bGT8=
Subject key identifier: A3:00:6D:1B:8F:A3:64:26:F1:66:29:C5:2B:F8:74:F6:20:51:51:6F
Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial: 010D0C9F4328584EA79534B7DEEF444B83ED9F40
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 3477
IP address blocks: 2602:810:d000::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:34:b7:de:ef:44:4b:83:ed:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4398a17b-5760-4d20-8bf3-f99463787c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:54:31:13:27:9f:b9:27:d4:72:1a:9a:7e:
cd:5e:b0:af:4d:3e:7a:e5:cf:51:58:35:1e:c6:d5:
f3:ff:5b:b7:b1:ec:b4:89:8e:eb:de:ad:16:4e:dc:
c3:7c:e5:ab:33:59:5d:c2:91:6d:08:71:1d:27:81:
e8:32:d6:c5:28:b2:3f:41:a4:a3:81:e5:ef:fc:77:
f2:d2:34:a1:80:ad:9f:3b:12:5c:84:01:f7:e8:19:
d1:ca:b2:14:2e:e7:8b:ed:6c:15:d4:c0:5b:f1:c8:
9e:5f:ce:dd:89:0a:0d:56:4a:52:c9:34:34:51:fa:
a5:7c:20:5c:4b:84:25:69:38:b2:35:90:4e:af:d5:
bc:d8:87:d0:58:90:44:ae:49:cd:76:b2:f6:27:81:
c6:8d:11:43:13:e9:08:c4:d8:68:32:4b:38:3b:70:
b0:f3:11:b5:42:12:0b:8e:41:c0:cd:e5:b0:32:b8:
32:74:22:96:91:a7:dc:a6:f8:4f:c4:a1:b7:0d:58:
ce:96:61:a3:bb:e5:f5:e9:72:a6:a8:c1:ad:75:ef:
2c:c4:b9:18:26:d5:b0:10:54:6a:bb:53:6e:b0:da:
9b:a0:bd:ed:b4:35:1f:fa:31:68:12:de:84:67:d6:
f4:07:d5:cc:a7:b2:59:a1:2b:68:e9:3a:7a:7f:5f:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:6D:1B:8F:A3:64:26:F1:66:29:C5:2B:F8:74:F6:20:51:51:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
X509v3 Authority Key Identifier:
keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:810:d000::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:f0:d9:fa:d1:63:20:6a:03:38:ed:37:1c:d7:5e:81:6d:19:
6f:f7:a5:c7:ad:30:2f:f4:9b:1a:7c:f8:75:c5:12:7f:39:c0:
32:d4:ad:8d:ee:32:30:f7:cd:a1:3e:b4:55:d7:7c:d8:e3:04:
53:d5:8f:bb:3f:e2:c3:e7:a8:af:29:e1:69:ab:3f:3e:9e:a4:
95:06:2d:e3:d5:a3:54:d5:8b:a7:53:0f:7a:49:ed:9a:d1:d1:
ea:05:c7:4e:d7:af:39:b7:62:32:ae:e9:6e:b7:ec:47:b4:35:
a3:75:a5:2f:4b:2e:33:2a:76:9c:44:d1:39:e0:c5:ba:8b:c5:
6e:fb:3a:29:82:2a:f5:7c:26:70:8c:59:e8:d2:10:64:aa:c5:
ef:c9:d8:72:f0:cf:1a:9b:13:cb:64:f4:cf:aa:bf:b5:3b:69:
fb:0b:8e:10:0d:17:d3:78:3b:3f:b7:55:56:84:c5:0d:a3:6d:
00:f8:09:bf:fa:31:9e:24:e6:a3:40:a7:55:73:c3:aa:67:05:
65:d1:cb:d1:d0:3a:c7:cf:ea:2a:8c:cc:a7:cc:0c:6e:1d:7e:
56:8a:47:f7:00:60:50:1f:70:c9:5d:6f:24:67:0b:62:51:27:
48:f2:4e:c2:2e:3b:46:6f:5f:a6:86:77:0c:8d:c8:46:0b:d2:
74:0b:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:47 2026 by rpki-client