
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
File: ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa (raw, json)
Hash identifier: qX0EfrMTJcFJ0UQUIO2CYI16j5m/lV8m5Q+1jj36m7A=
Subject key identifier: 7B:CA:89:73:7F:75:BB:80:41:9C:11:62:DE:3A:FE:B2:8D:5C:AE:01
Certificate issuer: /CN=96a2911a-8528-4c3c-bbb5-72bad72f8446
Certificate serial: 010D0C9F4328584F0D6CD43A910C0F5708CA0540
Authority key identifier: 4F:3B:92:EF:78:38:C2:10:49:7D:9C:8C:2F:ED:BE:62:A7:B1:C8:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 394276
IP address blocks: 208.94.208.0/24 maxlen: 24
2602:81b:3000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:d4:3a:91:0c:0f:57:08:ca:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a2911a-8528-4c3c-bbb5-72bad72f8446
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=29d78da1-0aaf-4f89-91df-1120002b46c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:21:c2:ac:e5:98:2f:c1:e2:2f:2b:90:e3:
5c:52:de:e2:29:30:50:4f:3e:63:a6:40:84:2c:f8:
60:0c:4d:42:b1:23:3b:ff:69:f2:98:c1:ca:c0:fb:
9c:76:04:7e:9b:ec:ac:0f:1e:9b:bd:8c:cf:ae:14:
77:f2:77:ec:33:c9:35:15:ee:81:5f:79:02:15:9f:
50:02:67:c0:89:d9:37:5a:47:f7:2d:c1:0f:fd:a2:
77:ac:02:f6:b1:10:83:37:35:2f:26:8a:63:36:af:
7a:f4:ca:b9:7d:30:f7:fe:08:c9:84:d8:11:32:87:
c0:ed:ce:4f:86:07:83:66:34:78:80:f1:f0:e5:ba:
94:d8:54:76:0f:6b:10:e2:16:1f:ef:94:2a:dc:73:
51:4e:59:6f:d1:1a:70:1e:b1:43:e0:86:49:f2:41:
70:28:5e:f5:c2:93:cf:5d:b7:06:69:19:5d:61:3a:
86:cc:78:4c:e0:e5:be:31:cf:21:33:36:08:41:a5:
fc:71:c7:98:44:24:d5:c9:e6:33:20:e9:42:7a:4c:
10:e0:3e:e3:60:2b:3e:5d:66:08:0c:3f:57:a6:ad:
d9:de:8e:46:fa:a1:dd:68:65:d8:51:42:79:e5:8f:
8f:de:2f:84:f8:ff:1c:d0:30:21:68:c5:dc:cb:b8:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CA:89:73:7F:75:BB:80:41:9C:11:62:DE:3A:FE:B2:8D:5C:AE:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.crl
X509v3 Authority Key Identifier:
keyid:4F:3B:92:EF:78:38:C2:10:49:7D:9C:8C:2F:ED:BE:62:A7:B1:C8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.208.0/24
IPv6:
2602:81b:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f7:9a:f5:19:03:9e:db:b7:08:30:c6:e8:96:35:d7:7d:56:
64:44:fe:3b:12:71:9f:41:e4:74:72:9f:dc:39:df:85:80:d5:
e2:d1:d6:4a:1b:87:cd:0e:15:6c:f7:23:03:88:77:90:bf:b1:
04:91:86:60:8c:38:8f:9f:99:59:b9:f1:a7:de:8a:02:02:4a:
f2:28:e3:47:4d:f5:29:00:7a:70:c8:d2:1f:3f:49:dc:43:22:
20:40:61:b5:09:38:af:20:56:7a:67:2e:aa:2d:98:21:3f:19:
2d:50:ee:da:62:df:11:3f:bd:25:a2:c6:57:a2:bf:df:28:b0:
42:da:83:5f:82:e3:01:36:6c:c0:ed:7c:ad:60:95:b9:85:17:
e9:bd:b4:7e:d9:a3:2a:84:95:7b:24:3a:db:bc:f0:a9:b9:01:
1b:c2:d7:c2:be:6e:96:1d:30:29:91:f2:c1:0e:f6:03:d9:d0:
8c:b4:26:05:ef:38:cb:00:8e:4c:f6:45:e3:d9:d2:52:78:46:
59:5c:3b:eb:4e:e7:5d:1e:d5:b2:10:42:53:3a:c2:16:29:f0:
01:04:ac:ab:68:a6:2b:59:a5:71:73:48:43:33:ae:33:41:75:
28:c9:93:69:1c:ec:1f:be:4e:f2:27:13:3a:d2:e9:81:bc:d3:
27:39:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:06:17 2026 by rpki-client