
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/342f7f84-f6e7-3ee8-b054-34f9a8d13552.roa
File: 342f7f84-f6e7-3ee8-b054-34f9a8d13552.roa (raw, json)
Hash identifier: SEttQXqNYaa2Cf6opi3z7txdP/SRt+iooQHnDovxe1o=
Subject key identifier: 74:87:30:48:49:AD:74:BC:C6:B8:7E:72:30:18:93:B5:9A:A3:21:CE
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F49892DA537E77944F7899680
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/342f7f84-f6e7-3ee8-b054-34f9a8d13552.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16740
IP address blocks: 2602:f5c1:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:2d:a5:37:e7:79:44:f7:89:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0556dc7f-f2eb-4124-ae01-77439f998d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:9d:c0:ee:c8:04:9f:3e:f8:66:91:1b:1c:
e6:04:a3:ea:1e:d3:64:a3:7c:cd:f4:38:5d:2d:15:
b1:47:d7:5a:c0:6f:70:e7:ca:b0:a9:7e:cd:cb:c9:
25:13:03:4b:8f:8c:67:df:77:e5:f0:34:51:4c:39:
58:4a:ac:f0:8e:f8:61:29:74:85:2c:27:08:69:02:
18:17:5b:87:5f:56:c8:13:7f:82:ec:18:37:c2:f9:
fb:36:e7:c5:0a:5b:49:b2:ec:de:84:28:77:18:72:
12:8e:21:e1:6d:cd:90:4d:a3:21:4d:53:69:62:97:
a8:43:63:c7:8f:8f:09:ba:4b:c5:d5:56:2c:ac:b2:
9b:fa:ef:f3:29:7f:0b:6f:1d:2a:02:2c:04:80:fe:
07:80:d3:17:cd:30:bf:7c:47:bb:4c:f9:e4:56:e4:
3c:02:39:99:a4:c3:54:0a:12:0b:6d:fd:bc:83:35:
83:b7:83:98:46:8a:8c:5d:01:3a:e9:64:3f:a6:87:
2d:8c:21:58:f0:cf:21:2f:17:db:3f:a3:98:1d:fc:
4a:eb:ea:86:fe:40:67:19:c1:3d:9a:51:79:fe:8b:
af:66:66:5f:27:d3:4f:db:15:5c:5a:42:27:ae:3a:
c1:79:01:1c:fc:dc:e0:5d:24:a0:e7:9c:6c:a3:36:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:30:48:49:AD:74:BC:C6:B8:7E:72:30:18:93:B5:9A:A3:21:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/342f7f84-f6e7-3ee8-b054-34f9a8d13552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f5c1:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:43:46:ae:a7:c8:4e:0c:ab:11:98:64:1e:90:93:7c:94:0c:
9d:57:f4:e6:01:a6:9e:70:ce:56:2a:fc:9a:73:b5:48:41:61:
93:d4:f0:6c:3e:dc:4a:8c:95:6d:24:fa:62:7b:91:c4:48:fa:
0d:c6:d4:e7:f1:55:2e:dd:45:cb:1b:c4:4b:f3:ed:b9:ad:61:
c7:56:63:f2:4d:c0:64:4b:4a:f9:3d:7f:e0:d5:8e:87:ae:49:
ac:9f:ca:6e:28:77:61:8d:27:82:22:eb:fe:16:a4:69:b6:5b:
94:30:f1:a0:0c:41:ca:2d:42:5f:fa:a6:78:7d:fb:c3:70:5f:
10:1c:da:1c:10:d4:59:f4:cb:8c:28:0e:58:95:41:69:6c:af:
54:54:63:ac:2b:33:d3:53:0a:1b:44:25:f4:94:9f:59:a6:1e:
e0:50:80:27:2f:96:b7:b6:a0:d4:70:ee:26:68:f7:de:f7:0e:
9b:46:e5:9f:69:24:f4:96:26:04:d3:e0:e2:8b:51:69:f2:c2:
42:11:5e:8a:04:3f:d1:0b:74:f9:74:48:62:35:e8:d2:68:e7:
31:75:1d:5a:25:bc:17:1d:6f:c4:95:59:44:27:3a:05:30:1a:
91:d7:a1:01:bb:7d:d2:19:d1:7c:be:9e:e0:74:98:50:04:80:
cc:f6:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:18:09 2026 by rpki-client