
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa
File: dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa (raw, json)
Hash identifier: Qt1YoIMm/yIcbLBD9tz2fdHY7Viye9SRbVFgEIYs544=
Subject key identifier: F8:F5:5B:59:4D:96:A9:CC:37:96:D6:84:68:36:8D:7B:52:B3:23:24
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EFCACDB4AB4FCDCC594BA4500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 395747
IP address blocks: 2606:4700:3131::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:db:4a:b4:fc:dc:c5:94:ba:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=8d3f881f-8656-473a-878a-e42134ab85f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:9d:b3:1a:0c:24:2f:3e:65:bc:3c:e6:80:
f5:b4:3d:42:a3:68:62:c3:57:33:47:02:bf:b0:b8:
91:ec:5a:b6:76:73:33:30:84:84:33:da:89:74:9a:
03:5e:11:d4:2d:2d:f6:bc:49:b3:4d:e2:82:b4:b5:
c3:59:b1:0c:1a:4c:a7:35:6c:ee:c7:f8:2d:9e:3b:
88:47:83:d4:ce:9e:5d:0e:a8:0b:6b:aa:ae:42:d1:
32:03:8c:78:8a:cb:36:23:a7:41:6c:18:d0:94:bb:
bd:14:79:d7:ff:05:b1:b4:01:45:e9:4c:77:d3:16:
a2:96:fe:6e:4d:18:7f:c5:44:08:54:3c:4c:f0:2a:
50:0c:33:3d:b9:49:48:93:68:53:97:1f:dc:d9:1a:
66:66:4e:c8:7a:54:b6:19:0c:59:f4:a6:93:87:4f:
55:13:8e:99:2f:9e:28:9a:a0:07:ff:28:75:68:f1:
70:ba:ea:12:e0:a2:eb:bc:c6:7b:b1:0a:a0:ea:40:
d4:40:00:6b:0d:a0:43:b5:1b:76:0a:a0:e8:02:6f:
c0:c4:cc:2f:d6:e3:0e:e7:fb:e0:1f:0b:3b:36:c8:
cf:24:ae:ef:d7:7f:e6:b6:5a:71:02:76:33:4b:6b:
ac:4a:1d:1e:10:87:b4:34:45:38:b1:aa:cf:b4:18:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:5B:59:4D:96:A9:CC:37:96:D6:84:68:36:8D:7B:52:B3:23:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3131::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:56:2e:ee:e3:77:c1:c7:79:61:90:50:89:ed:b0:7c:5a:0a:
84:0f:e1:1f:91:7c:69:f6:2e:2b:eb:b2:a2:cd:54:42:4f:4d:
12:76:49:75:cc:44:94:10:98:9c:df:60:20:28:93:99:bb:64:
db:e2:72:0f:af:c1:21:83:aa:0c:97:d9:1f:54:9c:52:a4:b4:
bf:80:67:9a:d6:33:3e:2c:72:a8:7e:68:03:71:ad:89:2c:86:
d3:9a:55:de:98:1b:3d:24:de:44:b9:65:40:ca:8d:07:06:36:
44:91:3f:a9:e7:74:be:28:cd:71:28:0f:3c:bd:13:17:c2:b7:
67:a0:83:01:f3:f3:ab:92:b5:ab:0d:92:c7:a9:7b:22:dd:f4:
b4:52:ed:e5:32:83:52:fa:d6:26:ac:16:9b:6e:18:e9:4a:98:
7b:a9:86:1c:95:e8:c2:ea:53:90:1f:35:b5:d0:5d:0e:d1:f8:
f4:6d:c8:60:98:4f:8a:f3:f0:fd:77:5c:29:e5:a4:44:fc:c9:
2e:59:d1:11:34:85:6d:6f:20:52:82:1b:ac:ae:70:2b:c0:5a:
92:ad:0d:46:36:e1:4e:88:d5:a7:5c:3f:94:67:ac:98:01:5c:
e4:f6:35:f7:36:ef:5c:b3:e9:aa:60:ae:05:4e:0d:b7:14:25:
73:25:c2:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rNtKtPzcxZS6RQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
OGQzZjg4MWYtODY1Ni00NzNhLTg3OGEtZTQyMTM0YWI4NWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEmdsxoMJC8+Zbw85oD1tD1Co2hiw1czRwK/
sLiR7Fq2dnMzMISEM9qJdJoDXhHULS32vEmzTeKCtLXDWbEMGkynNWzux/gtnjuI
R4PUzp5dDqgLa6quQtEyA4x4iss2I6dBbBjQlLu9FHnX/wWxtAFF6Ux30xailv5u
TRh/xUQIVDxM8CpQDDM9uUlIk2hTlx/c2RpmZk7IelS2GQxZ9KaTh09VE46ZL54o
mqAH/yh1aPFwuuoS4KLrvMZ7sQqg6kDUQABrDaBDtRt2CqDoAm/AxMwv1uMO5/vg
Hws7NsjPJK7v13/mtlpxAnYzS2usSh0eEIe0NEU4sarPtBg9uwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPj1W1lNlqnMN5bWhGg2jXtSsyMkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGNjZGY5YzItZmFmYy0z
NjFlLWI0YmYtOGQwODJhMTFkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADFWLu7jd8HHeWGQUIntsHxaCoQP4R+RfGn2LivrsqLNVEJPTRJ2
SXXMRJQQmJzfYCAok5m7ZNvicg+vwSGDqgyX2R9UnFKktL+AZ5rWMz4scqh+aANx
rYkshtOaVd6YGz0k3kS5ZUDKjQcGNkSRP6nndL4ozXEoDzy9ExfCt2eggwHz86uS
tasNksepeyLd9LRS7eUyg1L61iasFptuGOlKmHuphhyV6MLqU5AfNbXQXQ7R+PRt
yGCYT4rz8P13XCnlpET8yS5Z0RE0hW1vIFKCG6yucCvAWpKtDUY24U6I1adcP5Rn
rJgBXOT2Nfc271yz6apgrgVODbcUJXMlwno=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:07:48 2026 by rpki-client