
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
File: ac48a2d3-854c-3155-92d9-311295bde213.roa (raw, json)
Hash identifier: jwFxfkth6KMWz0H3su5NkwBzr7TrT55QnJIDUTGlxIc=
Subject key identifier: 10:70:DF:86:B6:C7:2F:A0:D2:3B:FA:E9:62:D5:6E:0B:34:AA:54:8B
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584F4986D9A53DE27BA17A1F3780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11537
IP address blocks: 2001:468:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:d9:a5:3d:e2:7b:a1:7a:1f:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9fd4b3fd-44b1-4574-b249-394dde604322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:d1:23:8f:93:f2:75:d0:d2:1a:f7:8b:ee:
ee:ad:30:0c:a0:59:fd:4d:2a:77:7b:f1:bb:24:c2:
9b:9e:fe:b1:88:cb:e5:0e:09:a6:6d:48:67:c5:e2:
fd:60:ad:fe:ea:fd:20:de:9d:f7:2c:2f:ad:c0:62:
cd:18:de:44:73:41:96:af:c9:68:1b:23:b7:0b:5d:
3a:52:af:96:92:c4:99:87:2f:f3:e6:e5:d1:e8:cc:
32:56:41:5a:1e:aa:28:73:3d:78:82:6d:ed:74:64:
b2:22:f3:08:51:86:b9:be:d2:24:49:8e:f3:e0:ba:
4a:1d:b1:ac:24:3c:e9:6f:ac:d6:0e:95:5e:4d:21:
b6:ae:1a:d5:96:0b:e4:ef:11:fa:a4:21:f6:70:b5:
0b:d1:7a:4b:20:81:74:24:59:4c:b5:d9:42:b6:24:
dc:03:a0:5a:cc:db:80:0c:bb:98:92:04:51:71:e0:
9f:d8:d0:a9:4c:b3:10:08:15:06:46:0b:63:67:38:
ca:59:dc:50:e6:fa:73:ae:06:69:07:12:bb:33:99:
3f:4a:c6:79:a3:ea:62:28:c9:55:39:20:7f:77:e0:
cc:b1:9d:16:e2:02:74:0c:9f:2b:db:26:a7:38:ab:
3f:d0:32:b4:14:d1:8c:2e:c2:62:e5:c9:06:29:ba:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:DF:86:B6:C7:2F:A0:D2:3B:FA:E9:62:D5:6E:0B:34:AA:54:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:468:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f6:11:74:24:26:3f:a7:ad:36:f0:e7:56:18:17:e3:79:a2:
d9:84:46:72:ed:9b:b9:2f:64:6c:a3:3b:fd:a3:9c:7b:3c:87:
69:c2:3e:35:4e:0e:13:fe:55:04:fb:49:50:fa:b2:fa:7f:7c:
c1:19:26:dc:f4:8f:1c:65:03:44:ea:2d:c0:97:54:e1:79:56:
1e:a7:d4:4a:a3:b2:59:89:7d:dd:3a:58:66:e8:e3:a8:c9:6a:
99:37:8d:ab:c3:41:d4:e4:6a:03:f1:6b:21:fb:2a:dd:23:b0:
21:9d:1b:21:11:af:9b:59:75:a7:ef:1b:9a:a7:4d:55:7f:52:
3b:c1:d6:ad:93:54:03:ab:67:95:83:29:48:02:08:ec:c3:c6:
90:fb:ff:50:d0:43:31:2a:d1:94:7d:a3:94:96:f2:be:39:a9:
09:f0:b4:39:fe:8b:f5:dc:ad:e5:a6:42:bd:4b:99:03:f6:d4:
16:f9:84:5f:2c:ca:a9:72:25:fb:ae:1a:94:64:88:1a:c9:8d:
e5:b2:c6:c4:23:ad:c4:61:53:ab:6d:52:a4:87:5b:1b:39:e1:
a7:f8:96:41:2a:61:47:54:d2:08:e3:39:61:91:14:2f:46:01:
de:8e:ef:b1:36:60:a1:3e:18:c8:fb:ae:02:b1:02:48:f6:a3:
72:94:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:35 2026 by rpki-client