
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddff5a0d-553f-30ea-8626-91eedc9560e5.roa
File: ddff5a0d-553f-30ea-8626-91eedc9560e5.roa (raw, json)
Hash identifier: VLDTBNO9gAmCcY+0yTF/UsaEYkVHsXde/VNn+MeqiLY=
Subject key identifier: E7:6D:33:8C:1B:5F:1C:71:38:86:96:65:E2:56:94:C6:98:42:88:30
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F51D296733A8282C6E4C31600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddff5a0d-553f-30ea-8626-91eedc9560e5.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2d81:3900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:96:73:3a:82:82:c6:e4:c3:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=f3971cfc-f30f-411f-92a8-6893ccf5ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:87:5d:f0:a2:b6:3b:26:cd:57:5f:7a:f4:
4e:be:65:f8:c0:03:e8:85:8b:06:5b:d7:54:cb:59:
04:b2:ee:01:6d:6a:8c:80:a6:2f:6a:af:7a:be:57:
5b:fc:a5:12:42:1f:23:2f:1a:cd:bd:1c:0b:e8:2e:
53:cb:e2:8c:2d:2f:e4:90:13:d6:2a:45:1c:b1:9d:
8b:06:b4:7f:ef:49:df:a0:6b:56:eb:e0:f5:09:48:
76:c0:3c:9d:c0:6e:c9:6e:18:09:04:eb:58:1d:b5:
23:b3:73:84:cd:dd:76:bc:eb:9c:53:29:4b:07:88:
88:7e:3a:9a:17:c7:a0:ce:13:5e:79:df:e5:43:f1:
64:79:51:72:64:4b:7d:4f:0c:d0:de:73:7b:9a:98:
5f:77:ea:2c:9e:2e:bf:75:23:e7:07:1d:93:98:1f:
b6:9c:00:ad:b9:ab:21:27:28:43:7d:d5:fd:30:9d:
0f:c3:d6:c6:5c:e0:26:7a:68:51:6a:ca:77:72:50:
2b:25:a8:33:41:ac:59:63:0a:2c:44:d3:41:ce:0b:
41:9c:28:d0:44:22:5f:22:e4:5c:12:55:23:09:74:
b2:60:41:50:80:0e:fc:23:13:54:97:93:94:29:e1:
ef:85:10:a8:67:47:7c:c4:29:32:ff:c0:a7:e2:b9:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6D:33:8C:1B:5F:1C:71:38:86:96:65:E2:56:94:C6:98:42:88:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddff5a0d-553f-30ea-8626-91eedc9560e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:3900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:16:a2:56:03:c9:29:57:97:c9:77:27:06:e0:d8:d3:3f:c7:
0e:5b:c4:ce:52:40:84:d1:40:96:8b:d8:56:8b:4b:85:87:d6:
cb:d6:17:4e:c6:4d:50:24:dc:36:60:be:60:34:22:1d:68:af:
49:e5:af:75:8d:46:7c:f0:11:eb:27:7c:0c:d6:a4:90:a2:71:
d1:65:d9:90:09:e3:e5:44:3d:9d:43:36:cf:f2:c4:6a:f0:84:
48:49:b5:3b:54:df:be:35:ee:02:39:ba:78:c6:bf:9e:8d:47:
ea:ad:2a:cc:32:1f:1a:5e:e5:b3:ed:71:e9:57:b5:27:ad:a0:
a4:6c:bb:dd:8b:a4:ea:27:c6:28:b7:57:12:9d:0a:e5:99:a0:
d6:7a:cf:b7:6d:30:56:02:1c:cb:7a:6e:26:7e:66:e7:7d:d0:
aa:c1:51:55:f2:5e:d7:94:b3:bc:9a:b7:ad:94:92:99:9e:b9:
df:64:52:7f:7c:ea:75:42:53:09:a2:03:0a:34:73:5a:6c:b0:
55:6a:1e:df:b5:3f:cd:a3:eb:3f:b9:c9:81:57:2a:db:d9:f0:
d8:40:fb:98:b1:e9:db:55:4f:77:a8:f5:53:22:4c:e5:94:c3:
99:1f:22:90:11:27:2e:99:64:7b:b6:19:06:ee:d0:ac:bb:e9:
8c:fe:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:59:59 2026 by rpki-client