
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa
File: 99f57e95-f252-322c-b610-0e25f2a01dec.roa (raw, json)
Hash identifier: zOiryWbdq+0n/xQrUYfkWdJwsv18fkI6p2TaDx109Nk=
Subject key identifier: 9F:67:B5:B9:60:B3:6A:E9:ED:F7:3D:58:0B:92:65:49:22:10:AE:EA
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584EA78837BCB5B5D2CB0C9B2400
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 9009
IP address blocks: 2607:740:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:37:bc:b5:b5:d2:cb:0c:9b:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=456a64ff-55ee-47d2-ae67-15b232914884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:43:8c:eb:00:b8:06:66:75:15:ca:12:38:
b8:b0:4b:55:da:43:fa:f0:f8:f3:9a:80:60:38:e3:
c2:76:64:18:6f:74:1a:bc:7a:c3:e1:01:0e:f7:76:
7e:c1:11:f0:2b:b9:db:0c:5e:8f:90:89:39:f0:5f:
57:d5:3d:e1:90:0f:47:62:90:c3:19:3e:4a:8f:d2:
a6:eb:79:6c:f9:ed:d9:7d:d4:5e:af:d0:4f:f3:e0:
a2:9f:e2:d5:12:98:6c:ea:26:d0:d8:e0:c9:1d:07:
c9:38:8b:4a:b6:10:c5:71:f0:4a:6c:d6:41:72:e6:
cb:e3:a3:8e:77:44:5a:1c:9c:40:24:3b:85:c4:15:
be:35:02:bc:26:c2:51:31:ce:b5:1b:64:24:3a:18:
eb:7b:32:f4:0d:9b:7f:87:22:7f:77:36:ca:90:3b:
94:e7:23:26:9d:75:13:38:90:88:8f:20:a9:fa:1c:
f2:c6:24:70:5a:e3:0c:2b:6b:ac:e9:79:34:b4:e0:
12:73:3e:df:8e:1e:15:f3:ab:03:1f:d2:22:6e:f6:
a7:0c:ce:6f:18:96:33:dc:06:d7:2f:f7:87:ca:df:
df:e5:c8:43:dd:d7:18:ab:84:be:24:d4:a6:ca:99:
6d:ba:c4:e4:be:37:a4:c3:9b:d2:38:2d:36:0c:3f:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:B5:B9:60:B3:6A:E9:ED:F7:3D:58:0B:92:65:49:22:10:AE:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:6f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f1:cc:99:2e:8d:df:f3:e8:d0:3d:c7:19:95:d9:97:c1:60:
4d:72:42:ca:96:dc:04:c5:50:bb:5a:d3:f7:2c:f2:55:08:b6:
b8:da:c9:b5:35:d9:97:0b:6c:ef:93:2f:c1:66:3c:08:9e:df:
a7:5a:45:a1:23:0d:3a:65:16:cd:64:0a:bb:04:55:67:d4:b4:
fd:21:ae:ae:51:f4:54:cc:5e:89:b0:c1:44:f0:23:be:df:99:
9e:81:e5:cd:fc:57:ce:cb:55:77:b8:9a:68:29:5b:16:02:31:
84:f4:ab:53:7a:1f:e0:6b:85:07:c8:68:31:64:fe:a7:d3:3f:
46:aa:be:c4:47:87:c6:71:c7:28:2b:ff:7f:75:89:9b:8b:ab:
a8:61:f9:10:b3:3b:ac:18:da:3f:61:bd:e2:a4:0f:6c:ba:a1:
ec:54:e0:ab:15:01:e2:6b:4d:0a:69:24:cf:a5:b4:02:fd:96:
ab:7d:2f:af:1c:9a:b8:94:30:93:0e:cb:58:30:9b:0f:a8:60:
ba:df:63:b5:30:6f:ad:3a:36:a7:16:45:aa:e3:2c:d1:e0:85:
dc:ef:ac:1f:5b:a1:59:4d:39:53:5e:d6:fd:69:d3:13:03:38:
cc:0f:24:2d:4a:d9:b8:58:78:26:76:f9:56:70:76:42:a8:99:
ce:74:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:30 2026 by rpki-client