
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
File: df5148de-ede2-3842-905b-9207fff8922c.roa (raw, json)
Hash identifier: BZkgiCijt/fjb2rUSYqRe1kUU2tmmMVx7ZR89Juh78s=
Subject key identifier: 12:8D:43:D1:27:74:09:17:B9:74:54:33:9B:E0:39:80:4F:D7:A2:85
Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial: 010D0C9F4328584E9A7FD138BE41398D8A9D7A80
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 21713
IP address blocks: 2605:c380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:d1:38:be:41:39:8d:8a:9d:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=432b9ce6-8592-4c9a-b3d3-196f26e3b39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:c3:16:84:2b:b0:5f:45:e8:ef:e3:99:84:
b1:41:d0:09:38:0f:c4:10:d6:54:07:aa:c8:82:4f:
03:70:ee:68:44:5b:8f:62:4c:ae:54:74:cb:cd:17:
b4:1d:4c:02:11:48:20:f9:94:9a:64:c4:38:fb:7a:
46:25:ba:f6:2e:19:96:e0:e8:f8:86:18:af:58:c7:
e0:04:32:87:1f:ae:75:be:cb:12:85:24:62:7c:bb:
78:3e:ac:57:51:0c:30:8b:b4:84:67:c9:49:6c:d3:
6a:cc:3d:7d:62:11:56:81:c4:ce:26:19:78:6a:59:
2c:71:3f:82:07:64:1f:12:c1:e9:69:17:68:82:cf:
e5:d3:45:7f:48:14:ad:93:f4:60:79:93:28:44:9e:
c5:2a:b1:b0:68:2f:14:a4:bb:9b:ba:a6:46:47:76:
1c:ad:4f:33:39:96:bc:43:70:49:02:f3:b7:82:f7:
38:de:f4:e4:74:e0:cb:22:05:3e:46:b5:f9:50:66:
d0:a2:fb:b0:26:bb:bc:59:60:a0:79:99:5f:d0:b6:
c7:f0:04:ff:07:58:71:12:c1:08:bc:cc:12:59:af:
15:54:7a:01:e0:5c:ed:48:78:ec:08:38:6c:2c:4d:
1e:2d:f5:bb:57:30:e1:be:2e:f7:13:e0:43:16:af:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:43:D1:27:74:09:17:B9:74:54:33:9B:E0:39:80:4F:D7:A2:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
X509v3 Authority Key Identifier:
keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:c380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9c:95:e4:21:b8:a0:1b:98:3e:a7:9a:00:c3:a7:05:dd:00:
ec:f6:25:67:5b:a6:57:52:9a:97:d8:20:41:85:95:41:40:df:
33:7f:f1:4b:76:e1:73:10:0d:d3:cc:c7:e7:b4:50:d6:0b:54:
45:83:58:ed:46:1c:ba:13:04:08:31:c8:a7:65:31:96:6f:52:
7b:e1:3c:af:04:13:5e:1f:9b:eb:29:3f:7a:1b:22:b7:5c:d6:
41:4a:f4:bb:e2:77:5f:b9:56:c5:e1:ef:5c:73:93:e5:46:1e:
9d:92:a5:4c:bc:16:d4:6c:0a:6a:e8:cc:1d:6e:3e:6b:a1:ed:
34:b6:4f:f7:14:26:ae:2c:d6:c7:8e:c0:45:e6:16:24:a7:71:
ec:8b:fd:65:ab:af:73:cb:df:92:57:3e:27:87:52:24:89:0a:
3d:3e:86:3a:af:4d:56:f4:f1:f4:13:73:c0:13:8c:84:e4:cc:
eb:48:61:ff:a6:e2:9b:24:e1:9b:76:17:da:dc:20:8b:b6:71:
53:d0:3c:eb:e3:9a:cc:5f:32:15:da:88:7f:41:06:6c:bf:a7:
45:7f:2b:29:8f:5b:e2:24:f7:c4:2e:6e:0b:5e:f5:77:bf:73:
29:d5:eb:fe:d4:46:9c:c1:00:ec:a6:5f:bc:47:d6:1e:01:58:
53:33:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:58:49 2026 by rpki-client