
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa
File: b02811c2-ab72-3845-927e-12fb04c97d6f.roa (raw, json)
Hash identifier: D67DOUYVNqKImWGfJGIVx9JkkfDwOKyniPO0J/KkSVY=
Subject key identifier: 89:C6:FC:7D:0B:05:39:9D:EE:C1:8D:AE:0E:BF:1F:2C:D7:C2:91:3B
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F4328584F6F230245E7FE04735708CA40
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 7782
IP address blocks: 2001:4948::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:23:02:45:e7:fe:04:73:57:08:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=2770826f-0f6b-46a9-866f-6dc3d34601b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:a2:8b:36:de:ae:67:fa:f7:82:d0:3d:f8:
e5:d9:3d:f7:5b:75:c1:38:34:f5:5b:37:bc:fe:63:
4b:66:6f:d9:97:b5:57:b5:07:cd:dd:b7:d1:10:f0:
b3:6f:28:c6:a8:fc:93:f9:7f:10:66:55:a6:21:1d:
d2:f3:b2:38:63:03:13:70:cc:cc:60:4d:e3:ee:a9:
e9:e9:06:b7:93:5c:49:a0:7e:0b:87:06:3e:be:79:
50:ef:23:ae:e2:b4:e7:43:82:86:52:87:65:aa:66:
d5:9a:60:42:c0:5e:eb:da:bc:6e:8a:0a:79:de:56:
48:41:2b:88:c6:ee:2c:51:f8:3d:b5:c3:0b:50:76:
a9:bc:bd:da:9f:f0:1b:e2:71:b3:9f:80:c8:42:f7:
05:ad:5f:fc:18:9d:66:12:29:a4:99:6a:aa:a2:5e:
d7:af:ec:86:c6:95:9e:cc:fe:8e:06:0a:03:39:90:
bb:02:3c:10:7a:f6:8e:97:42:e9:ab:d2:e8:62:67:
ed:0f:9d:2d:5a:79:b2:c0:f3:f6:4f:1a:40:82:08:
aa:42:bc:5d:58:79:18:cb:02:5a:7c:c8:cc:a5:df:
fd:cc:47:c6:96:7d:80:51:a3:64:b1:5d:72:fc:8e:
d7:c8:14:b6:8c:18:ca:8b:de:f4:64:2a:03:b8:16:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:FC:7D:0B:05:39:9D:EE:C1:8D:AE:0E:BF:1F:2C:D7:C2:91:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4948::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:5b:2d:20:a4:75:59:83:ad:cc:a3:e5:0d:04:85:19:30:23:
c9:12:ed:63:7d:b7:b2:67:1f:28:9f:b7:44:bb:cc:82:32:a2:
84:f3:3d:f0:51:98:89:61:f2:eb:2c:b8:20:6f:ed:f6:8a:55:
3c:92:59:ac:45:07:75:06:d1:0b:9f:b9:e0:77:fd:bd:22:15:
9a:5f:d9:56:98:57:c7:5d:33:0e:6f:6a:6f:ba:29:26:69:d5:
8e:c1:db:c1:57:94:1c:a5:d1:14:ff:61:c4:e6:3f:ae:ab:09:
1c:95:db:f1:54:2e:7a:3f:b5:a9:f7:a6:75:d3:c8:cf:f4:80:
6a:81:6f:aa:b9:d6:8b:2a:0d:6d:03:8d:85:03:9e:8a:28:0d:
4b:cc:bc:8e:c2:06:57:76:23:d7:87:33:16:a5:6a:9d:5c:24:
4b:34:ab:68:78:01:aa:29:d1:2f:33:5b:86:47:9f:96:c7:a3:
2a:35:98:a5:95:7a:19:7a:78:c6:53:9c:a0:78:0d:f4:aa:f2:
7c:8e:72:25:13:15:c7:d7:24:9f:a8:74:e4:89:78:29:61:4d:
d8:85:74:1c:b0:6d:eb:78:05:6e:79:3e:bc:ac:52:39:90:3e:
24:84:52:9c:06:5d:78:a3:38:69:a9:1a:db:d1:25:08:76:7b:
d7:9b:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:17:59 2026 by rpki-client