
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ffd13c07-6b55-315b-9d4c-c76ea1148dd3.roa
File: ffd13c07-6b55-315b-9d4c-c76ea1148dd3.roa (raw, json)
Hash identifier: uYqiRpz9CruWE5Dyvfhc0FM3Ra7/e8lMWeXslJyX604=
Subject key identifier: 85:76:E9:CC:1D:33:4C:CA:82:36:29:F3:80:8F:AF:67:2C:57:00:30
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584F49747709724E3C237D0486E0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ffd13c07-6b55-315b-9d4c-c76ea1148dd3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 198025
IP address blocks: 2602:f9f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:77:09:72:4e:3c:23:7d:04:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=00e58942-6220-4245-98aa-5e75c40668cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:f8:7b:2d:7f:2c:26:f7:b8:41:9b:62:ee:
92:21:5c:34:b0:2a:08:f0:6e:d9:62:79:f8:ad:2b:
22:be:45:31:a3:a9:5c:cf:70:76:da:95:63:e7:52:
6b:01:cb:10:e1:24:9e:74:17:ca:1a:14:f7:33:9b:
96:24:e8:b4:55:63:3b:ab:19:cf:f9:63:db:64:a3:
e4:d8:76:20:41:37:53:bd:91:7c:08:84:45:a7:74:
15:67:f5:46:04:18:25:dc:6f:45:25:29:0f:2d:87:
a8:0b:9a:26:38:37:58:cf:71:24:30:bd:15:de:9b:
d5:4b:93:23:71:f6:03:c3:be:38:a1:78:7a:73:a3:
24:1f:0b:4a:b6:69:b5:cd:d0:b7:06:dc:81:cc:76:
06:67:bd:69:df:93:94:b5:fa:e2:81:2c:d3:de:b8:
48:bf:83:04:41:26:b2:0e:4b:97:b0:ec:cb:a7:81:
3b:b3:7e:39:51:58:5f:83:df:c3:be:e6:b0:a8:ff:
02:21:f1:05:9d:3e:32:f0:92:1d:69:88:2c:cb:fa:
f1:a0:d1:1c:fa:1f:b8:ce:85:d6:e9:d7:52:04:6e:
27:6b:b9:62:d2:d8:bd:2a:4b:3b:8d:ca:5e:f6:10:
d4:8e:d2:89:e4:cd:c2:28:1a:14:7e:ce:09:b4:2a:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:E9:CC:1D:33:4C:CA:82:36:29:F3:80:8F:AF:67:2C:57:00:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ffd13c07-6b55-315b-9d4c-c76ea1148dd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5f:87:d5:31:8b:ea:2c:1f:85:6a:45:fa:94:b6:bf:3c:d0:
07:a3:3d:96:c1:29:1f:97:a7:32:39:e6:c5:30:5c:ec:9f:d7:
f4:8a:7b:73:65:03:4a:fb:92:41:6e:9c:c8:af:a3:d5:09:c4:
08:67:66:3c:52:4c:75:44:d8:01:16:87:8c:62:b8:63:00:dd:
ac:3c:69:1a:ae:61:72:16:f5:11:b2:85:2d:5f:6b:30:3e:fd:
48:cb:78:4c:94:3f:8e:9a:20:79:e7:b9:fb:85:75:65:30:f6:
30:b4:26:22:ca:82:07:86:06:01:98:f6:ba:2a:ce:ab:5c:6d:
65:0d:57:aa:99:a6:0d:40:df:e8:bd:32:91:7d:d1:03:4c:e6:
59:d9:d5:fa:73:d0:36:7e:80:2e:af:dd:9b:c9:ec:28:7d:10:
99:d4:c2:02:66:f1:d8:01:56:9f:9c:fb:50:9c:34:24:5c:bd:
0b:11:97:8a:79:1a:a9:5e:e1:6f:d5:e5:21:ae:dc:4b:a9:b8:
3e:6a:2e:67:21:f2:3d:32:f9:fa:6d:46:93:ca:e6:98:60:c0:
e7:9e:63:16:6a:c4:c2:ea:83:31:60:d2:47:08:99:c8:5c:d6:
d3:14:47:5c:cf:b0:bd:81:8b:f0:ce:1a:8e:53:80:44:bc:28:
ca:15:ed:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:51:17 2026 by rpki-client