
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
File: 2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json)
Hash identifier: iL46mrMwGaf1dYVkJJsugj2dJZR8pigtJFqlwrlBQoY=
Subject key identifier: 1E:CB:77:ED:71:50:A7:4F:B0:D7:37:3F:01:73:8B:C7:E8:31:EE:50
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F4328584F0ED235377241BCC0136A6F10
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 3477
IP address blocks: 2601:a012::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:35:37:72:41:bc:c0:13:6a:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=bf47fca1-eb8e-424e-ba4e-64c838dc519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:61:ea:36:6a:48:74:e5:8a:8f:97:7c:e4:
00:da:18:93:55:66:11:46:51:c0:d0:cc:6e:e4:28:
e6:62:3e:b7:26:f7:9a:aa:cb:da:ec:d4:39:ab:8e:
23:d3:b7:22:bf:0b:21:ee:bb:26:b7:5f:c4:8d:a0:
1c:74:b5:2b:47:11:24:27:83:4d:ec:dc:a2:62:81:
d1:61:a9:94:45:c6:4e:88:06:f6:fa:76:a8:01:2f:
77:fa:f7:28:41:c2:9e:c5:f6:93:9b:42:af:ae:b0:
b6:c0:37:7e:31:1d:2e:72:bd:b1:81:77:b0:aa:cf:
67:0d:18:11:36:3c:cc:33:27:e0:c6:79:8e:fc:c2:
5e:a5:e7:cb:ad:10:1f:6c:8a:b3:6a:23:05:ef:d0:
f6:91:8d:1b:b8:69:c9:eb:84:88:a7:14:ff:61:36:
1e:d8:4c:4f:34:3f:c2:bc:86:a1:1b:1c:cd:27:39:
ea:5f:9f:1c:ca:ee:12:30:be:7e:7f:e8:49:2a:cf:
de:54:38:df:60:b6:1e:a3:54:1b:d9:09:8a:e6:fe:
43:77:d8:b9:e0:3a:f0:67:77:71:bf:c2:8c:b8:95:
45:e0:fd:63:2f:8f:dd:2d:0a:d5:0e:67:7c:17:e0:
ea:ee:31:56:01:96:51:63:e9:16:d4:25:63:02:26:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:77:ED:71:50:A7:4F:B0:D7:37:3F:01:73:8B:C7:E8:31:EE:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a012::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0c:6a:15:4e:20:ff:08:d4:4e:e4:f1:21:b4:17:32:90:76:
f1:a6:45:63:39:28:af:cf:61:cd:cc:c9:8a:2c:c8:d4:d7:0d:
9f:66:18:ce:5b:a2:17:bf:b1:c5:c3:d5:05:8b:ee:66:1f:bf:
53:95:c4:e1:23:ed:90:a8:bb:15:53:23:15:6a:38:19:f7:52:
f2:99:3f:de:52:11:d2:75:eb:8b:8f:df:79:95:37:c2:7f:b6:
aa:99:f5:af:bd:cb:c8:97:b1:81:04:18:42:a0:91:17:93:9c:
1e:80:91:7d:d9:84:c0:17:d4:bd:5b:57:2e:dc:eb:f7:f9:96:
2e:49:8f:11:6f:56:ee:3e:73:dd:24:ab:45:4c:aa:2f:4a:77:
4a:cf:6a:d1:3f:a2:69:78:78:e4:4d:53:52:14:9e:0b:b2:c5:
c5:40:9f:71:14:b3:08:1e:0c:0a:0d:97:fe:ec:1e:6d:46:06:
fe:12:64:b0:02:34:ee:a1:64:55:7d:76:2a:c1:43:e6:97:45:
29:c2:4b:9c:3a:97:bf:d2:cf:49:ab:d4:d5:49:49:e3:1f:35:
ac:08:79:67:d1:70:ed:b0:78:ba:e8:a1:8f:25:84:3a:40:7f:
50:39:23:1f:4e:1b:a7:73:36:88:f9:b2:f3:b6:dd:12:9f:02:
93:55:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:20:07 2026 by rpki-client