
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
File: 66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa (raw, json)
Hash identifier: diVha6y6Bx4gxPYCmIxBeIB1CAA9LzcVEj2XyglLkVw=
Subject key identifier: B3:5D:76:FE:8B:54:8C:CA:4E:C0:80:7D:F5:55:EF:77:B9:F2:7E:FD
Certificate issuer: /CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
Certificate serial: 010D0C9F4328584EAD1C6D871CFF2DA45176D600
Authority key identifier: C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 402411
IP address blocks: 2602:f3a9::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:6d:87:1c:ff:2d:a4:51:76:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=9d39e99e-ffc3-45b0-ab6c-ab0fd11b3294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:6d:6e:97:47:9f:e2:90:44:a2:08:a0:2f:
ec:32:1b:a8:66:c4:dc:10:17:a4:43:95:5c:29:aa:
c7:50:de:fc:29:0c:6f:37:47:28:68:0e:d6:62:32:
9d:12:be:03:14:1e:c4:d4:e5:40:64:ec:ae:89:5d:
bc:0f:b5:8d:0b:f9:2b:09:9f:72:67:1b:dc:fc:65:
5d:c8:e3:01:12:c4:c5:16:75:fb:9e:4e:61:a1:6f:
bc:32:fb:1f:d0:77:ce:2f:d2:3a:cd:c4:d9:5a:f3:
e1:10:82:d4:d3:23:f8:e7:ef:02:f0:64:4b:dc:57:
1e:b5:76:19:5c:9d:41:2b:21:85:a9:49:1d:37:c2:
39:d8:f7:9f:4c:24:fd:f1:56:3a:3c:a9:c0:18:87:
e4:97:8b:fd:0a:a9:0b:4d:df:77:f7:8e:cb:71:a1:
31:a9:07:aa:2a:fe:b6:08:07:37:74:fa:97:1a:44:
fe:d5:68:19:07:7b:6f:ec:43:9f:41:f8:6b:9e:b6:
4c:82:c4:d5:dc:39:94:b9:6f:75:2e:d2:2d:58:36:
29:12:e1:cf:2f:5c:f1:1d:f6:e7:e3:6a:4d:d1:c9:
ce:18:1e:92:96:71:0d:42:c9:24:b3:ca:63:5f:14:
8e:ec:17:08:e7:54:9b:f1:0b:fe:1d:8c:ef:3d:82:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:76:FE:8B:54:8C:CA:4E:C0:80:7D:F5:55:EF:77:B9:F2:7E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl
X509v3 Authority Key Identifier:
keyid:C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f3a9::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:97:50:03:ec:d1:16:be:ce:c7:05:88:07:53:49:f1:2a:51:
e3:53:f0:7e:b5:ee:de:14:5d:0e:2b:e4:40:fa:e3:8f:ec:c3:
2e:47:38:ab:ad:05:b9:ef:41:da:d4:32:bf:ec:3b:26:0a:bf:
67:68:35:51:df:fa:a4:24:f5:97:3a:ea:81:64:78:5e:6c:f7:
6c:df:46:15:21:02:08:32:eb:e1:db:3e:3f:86:b5:ce:36:c6:
2f:eb:12:1f:36:1d:09:71:a2:a5:24:29:5b:24:56:bd:21:b4:
e2:de:2e:28:c9:52:c2:8f:33:eb:7b:68:98:61:6f:68:6f:08:
f4:5b:3a:4d:e2:20:b9:43:b2:f4:cf:9f:fa:96:d9:18:d8:5d:
54:3f:f2:78:10:7d:6e:ad:e9:2b:be:9b:46:5b:85:4d:f6:19:
90:f7:79:b4:a2:ef:69:3c:ab:56:fb:8e:7a:25:2e:37:ab:f6:
19:ea:20:49:a6:00:d9:9e:2e:35:f1:01:a1:af:44:c6:9e:2e:
3f:55:ae:cf:e6:0e:4b:7f:8d:16:40:3a:62:c0:ed:35:56:69:
5e:80:de:34:d5:14:99:4f:4d:7f:92:58:1a:21:c4:74:18:3f:
e9:01:31:f9:b2:31:17:c4:de:61:7a:37:8d:ee:4e:db:38:16:
da:52:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:56 2026 by rpki-client