
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa
File: 1470d6ba-0af0-3bb8-9022-7448c03a312a.roa (raw, json)
Hash identifier: cyiVcZXwnJ2eIjqqax72jx9tc50Sx1omG4UIGNbfTX0=
Subject key identifier: 78:32:6F:06:1C:0D:9D:B6:E4:4D:9A:5F:85:9D:BF:51:6E:C3:E1:47
Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial: 010D0C9F4328584EC20C6CFF668EAEDEEA00F890
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 32097
IP address blocks: 2001:4858::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:6c:ff:66:8e:ae:de:ea:00:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=b5fb1485-3ba9-4ae9-bf46-8d54d0afdee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:2d:6a:62:42:59:48:e5:04:b3:2b:2a:d1:
5a:72:c7:d3:f8:73:0a:8d:fb:3b:0f:17:b8:19:cd:
e2:32:68:4b:da:15:13:8f:ed:21:51:49:20:df:1e:
7c:a2:37:52:5d:01:8b:ce:b3:6e:89:72:22:78:38:
d0:d4:93:22:0c:91:bc:ca:44:f6:5d:26:83:cb:b4:
12:9a:27:62:92:6a:28:80:15:63:5e:9d:90:dc:fb:
d2:74:b2:39:85:69:5b:fc:40:c9:d3:9d:5d:30:0b:
e7:b6:0d:f1:ba:6f:33:ed:e7:f9:95:26:54:da:03:
30:36:69:42:42:47:25:08:be:ad:81:25:bb:87:f5:
f0:95:69:23:31:29:fd:64:8f:f1:62:db:53:ff:2a:
4d:19:bc:33:dd:04:3d:1c:f2:9b:5f:1b:12:03:d3:
aa:a8:21:c5:96:10:58:f0:e5:5b:44:47:65:75:ac:
12:e1:0c:e4:17:50:82:5b:20:f7:46:e6:ba:47:5a:
61:0d:6b:b8:f7:f7:3d:87:05:5d:e4:92:d9:d5:c1:
65:75:0b:3b:85:9b:13:43:10:be:22:56:5d:ef:9c:
e1:12:5a:ca:bc:98:61:22:58:0c:49:61:ba:32:93:
09:92:9d:64:ba:50:b8:6f:6b:5e:37:75:ec:8e:a4:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:6F:06:1C:0D:9D:B6:E4:4D:9A:5F:85:9D:BF:51:6E:C3:E1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/1470d6ba-0af0-3bb8-9022-7448c03a312a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
X509v3 Authority Key Identifier:
keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4858::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d9:24:12:b3:49:58:98:e3:19:6b:83:8c:31:15:83:03:d0:
a0:88:20:0d:4d:04:01:99:0e:60:9d:46:60:e1:81:da:a4:11:
21:bc:5c:5e:93:f2:14:4a:d4:04:94:31:dc:a2:60:14:49:1a:
44:19:d3:94:a9:46:85:4c:db:02:71:5c:4d:76:20:f7:56:a9:
36:5c:07:d7:4d:d1:b0:f8:40:5e:53:8e:59:4a:53:d0:d3:d7:
8d:e5:a1:d6:4e:07:20:09:09:9f:9a:63:74:03:b2:c9:0a:b4:
c8:98:de:f9:75:8b:ff:bd:5a:ea:ca:d2:6c:4e:bc:db:1c:f3:
29:89:62:2a:f0:e5:f5:b8:db:5c:cd:b1:9b:1e:86:1b:39:0a:
3d:21:a9:b9:60:b0:2f:a8:41:75:8d:66:4a:55:1c:67:49:63:
a3:a4:91:91:e3:4f:1b:50:2d:1d:9a:28:4f:44:a7:77:e6:05:
23:9b:e7:ea:72:f1:1a:5e:1b:1b:f0:92:60:6a:7b:66:72:bb:
0c:a5:37:87:9d:90:86:2c:3f:10:f1:df:f2:b5:0c:16:2e:b2:
2e:32:71:e2:0c:28:4b:2f:4a:cc:eb:4a:5e:99:68:a3:ae:8d:
7c:e1:4f:15:15:bf:22:4c:82:02:9b:ab:ac:9f:11:8b:4b:be:
8b:19:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:58 2026 by rpki-client