
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
File: 678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa (raw, json)
Hash identifier: ayQt/hNeXhzXOB6NI9CZ23WSf9FB1S7WrwKMeYRiSz8=
Subject key identifier: 16:2B:7B:D7:63:60:C4:98:F6:53:FA:D7:CA:27:EB:F0:E8:C4:CE:66
Certificate issuer: /CN=48f56219-8ac3-430e-90fc-cf0aea21115d
Certificate serial: 010D0C9F4328584F0ED22E02B80CCB603AFEAA00
Authority key identifier: C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 402714
IP address blocks: 206.197.76.0/24 maxlen: 24
2602:f368::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:2e:02:b8:0c:cb:60:3a:fe:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f56219-8ac3-430e-90fc-cf0aea21115d
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=efff9801-88f6-48bb-b868-cd1243b6bfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:c9:90:0f:82:3d:bc:9d:65:6d:d5:63:a3:
6a:01:ff:ae:1f:86:63:99:73:a6:a0:1c:20:d8:6a:
1b:98:9d:91:ba:80:bc:20:4d:7d:1b:03:53:8c:69:
d9:90:0b:81:7d:c0:fc:86:13:41:f7:1e:f9:30:34:
85:36:94:52:ea:cc:74:c7:53:9b:d2:68:85:72:ae:
eb:e5:9f:df:43:a2:08:15:7f:34:c7:8f:7f:17:44:
59:92:8c:cc:ca:f3:d1:66:e2:27:29:59:8c:d6:e3:
48:10:2f:6f:5d:8e:2c:5a:f8:98:38:0e:db:9d:80:
e9:a0:ed:86:f5:bc:21:03:fa:e0:40:43:d6:a7:45:
65:6a:21:12:01:7b:a3:a0:92:8c:42:5e:23:19:4f:
26:10:43:54:1d:12:99:77:f3:de:6b:a7:b3:fb:61:
6b:34:ff:d6:d1:07:3c:bd:f6:84:d2:40:94:3e:8a:
07:c6:e4:5b:67:10:f4:c0:53:17:8c:67:4b:42:65:
f0:41:b2:80:5e:c7:ab:47:0f:cf:d9:ef:2f:08:d6:
bb:d9:e3:35:34:64:a6:0d:d3:6f:ec:dc:a7:d0:ba:
4c:e7:cd:84:9b:45:9a:4d:74:9f:a6:15:e9:f4:4b:
db:41:7d:ae:30:56:87:45:9c:47:0a:97:2a:e5:4c:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:7B:D7:63:60:C4:98:F6:53:FA:D7:CA:27:EB:F0:E8:C4:CE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl
X509v3 Authority Key Identifier:
keyid:C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.197.76.0/24
IPv6:
2602:f368::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:39:ed:88:b8:1b:33:99:dc:ca:28:50:a3:2c:e9:48:63:5f:
a5:2b:90:07:8f:f4:84:4b:63:9e:ab:14:33:7c:bb:02:6b:81:
26:30:95:e7:e4:7e:d1:7c:08:63:ba:66:54:1d:86:ce:b5:a7:
77:d8:8b:8e:1f:26:d9:a9:02:39:67:25:e0:56:93:30:f9:a2:
19:bc:50:9d:0c:57:0e:a2:89:08:55:27:5c:57:75:22:b3:2f:
8d:26:fb:5f:6c:5c:54:74:93:b9:00:bc:a4:9f:0a:50:a9:85:
49:f3:fe:88:8e:63:5f:d7:c7:ca:f5:82:13:b9:c4:f3:e5:75:
79:21:3d:23:96:9d:a8:b7:3e:31:66:9e:71:26:da:80:75:04:
e3:c4:bb:4b:2d:3e:8a:62:bc:9b:35:8a:85:42:17:0d:74:a2:
1d:cf:ab:32:e3:bf:97:5f:d2:fb:4d:25:b8:38:69:a9:e0:08:
61:33:f7:87:11:bf:af:08:85:09:50:6f:62:66:42:64:62:e2:
0b:4f:6a:2b:dd:a7:7d:49:6e:f2:26:6d:a3:e2:18:bb:f8:66:
54:89:37:4e:59:1b:8a:67:7d:1c:de:71:2a:ab:80:77:f7:02:
b3:15:48:8e:01:6b:43:35:af:ff:13:12:92:3b:a1:45:99:63:
a8:e5:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:48 2026 by rpki-client