
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/879a85c2-65d3-3838-84fc-0ab5ec74c644.roa
File: 879a85c2-65d3-3838-84fc-0ab5ec74c644.roa (raw, json)
Hash identifier: 1vkBgFryvKp3yFt/CgB7BnM/KN0oeJWXnOf+1DBaq6s=
Subject key identifier: 33:68:73:00:C0:5F:42:21:06:83:1B:CE:3C:F6:1B:6A:46:1C:01:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F497C4E6E540E234B34360F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/879a85c2-65d3-3838-84fc-0ab5ec74c644.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 35994
IP address blocks: 2600:1409:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:4e:6e:54:0e:23:4b:34:36:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cb81b82e-0c56-4f37-96a4-44155395365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:3d:b1:d2:53:ea:23:83:64:8b:c6:56:6e:
77:d7:38:7d:99:a3:89:7c:f1:f0:21:eb:84:50:ca:
d6:40:17:93:b6:b7:be:9d:a2:8a:28:71:37:f3:0c:
40:41:2e:c9:72:d8:00:c6:e0:53:f9:10:e0:f7:09:
c3:e0:f8:d6:df:c0:43:69:43:e8:b2:fe:a3:68:02:
eb:01:f8:f3:f0:32:4d:3c:f9:c9:a6:aa:3b:8a:bc:
38:95:5a:d5:0e:64:52:e3:34:bb:1a:21:d8:b2:1b:
9f:ca:39:2f:2d:ca:19:e6:d0:e6:e5:d5:a6:c5:30:
ac:90:eb:e4:a6:18:59:8a:66:1e:2e:5d:5d:e8:3c:
6d:c7:ab:7a:25:c5:33:83:82:96:b3:74:f6:47:c3:
57:cc:7f:83:4b:80:6e:30:3c:98:59:26:4a:7e:28:
19:d6:97:b5:df:04:ca:0b:15:70:fe:81:90:5b:51:
7a:ca:78:ad:d7:ca:9f:81:aa:59:b4:58:ea:87:e7:
14:1c:36:1a:9d:70:c6:7d:f3:de:03:33:5b:f7:34:
bd:c0:94:f7:b9:a0:fe:a4:d5:62:7f:35:7f:31:5e:
04:31:f5:27:07:ed:27:db:2a:41:de:08:54:a4:3d:
0f:38:03:b3:cd:a0:7a:0a:f6:6c:71:49:0f:6c:1a:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:73:00:C0:5F:42:21:06:83:1B:CE:3C:F6:1B:6A:46:1C:01:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/879a85c2-65d3-3838-84fc-0ab5ec74c644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1409:800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b4:b1:0e:8c:57:6c:56:0b:c5:0a:0a:bc:8b:06:5c:1d:51:
05:0b:30:d3:33:07:2f:1b:2e:3a:ba:02:c6:f3:79:ec:41:8c:
76:c7:0f:32:50:92:8c:5a:65:81:f0:07:5b:ae:0e:0c:8a:93:
a8:3e:b7:3b:15:fe:a8:c5:4c:ca:dd:e8:22:4e:e7:ac:81:6d:
51:f5:a3:da:f2:b5:fe:05:ab:92:21:b4:b4:8d:d0:9d:85:18:
21:bd:3d:49:c5:2c:22:1d:bc:be:e1:c3:e9:42:52:dc:6b:4e:
a5:49:95:aa:e7:c1:6c:b7:69:c9:28:0b:eb:23:4e:3a:11:05:
4e:ed:5a:00:ca:7f:08:b3:af:44:62:d5:66:39:6f:a9:d8:74:
a4:c3:02:52:6f:25:d5:c0:75:de:0b:40:fd:6e:35:63:d0:e6:
f1:eb:34:76:02:f7:2d:75:09:84:3c:b9:04:02:76:a6:92:53:
6b:fb:2d:aa:2a:58:e0:f2:bf:ad:29:bd:5c:a0:b2:44:ba:a1:
34:c9:91:d9:91:2a:ef:2e:31:7e:8f:67:7a:83:56:4f:65:5a:
83:79:35:9f:83:59:54:7e:7c:07:b3:71:68:e4:e5:6d:68:25:
e4:c9:6e:ed:f3:64:4d:c8:36:09:01:93:13:59:81:3c:42:95:
a7:12:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:19:47 2026 by rpki-client