
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa
File: bf431732-9b31-372e-9197-04e13d9230ef.roa (raw, json)
Hash identifier: Y9+D7DaGO9u1yrDP5WcRfpvnB4GjRoCGEA+m3BQEESY=
Subject key identifier: FA:FF:C0:F9:85:8D:30:ED:B0:EE:27:6B:1C:86:54:E5:A7:C1:4F:C7
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584F02422CEDFF72190F06F2E140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 11404
IP address blocks: 2607:fa40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:2c:ed:ff:72:19:0f:06:f2:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=d3c8b217-a332-48e9-95c0-2a58df9e1783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:33:f4:0c:62:46:f7:6a:d6:c0:c1:87:6f:
f6:16:41:17:06:ab:eb:20:d9:61:58:ad:66:cd:6e:
81:e3:b9:25:0e:47:2b:71:01:3f:fe:44:b2:c5:39:
ee:29:17:8b:c3:49:f5:18:b1:b6:02:f3:84:7e:89:
c3:65:50:c9:5e:8e:de:10:3c:8b:59:37:ca:da:48:
60:5b:4b:81:64:fd:4a:b6:52:e7:c4:47:ef:f9:89:
1c:a7:83:55:a7:4a:16:c9:9c:d6:a5:8f:6f:64:fd:
34:bf:0a:63:f7:ab:fd:3f:8f:62:a4:4a:9f:74:92:
7a:e7:02:d0:9e:41:d2:c6:45:64:eb:f8:b6:67:95:
82:48:d9:de:bc:d6:4d:30:b4:5b:6b:4d:97:1c:9c:
06:0e:72:c2:8c:49:10:cc:31:9a:10:fa:e8:bf:fe:
7d:9b:4f:f8:d7:f5:c3:f4:f1:11:5f:1c:fc:4d:d2:
bb:38:02:3d:38:cb:40:bd:1c:ca:d0:ff:40:9d:f3:
d0:31:92:12:f3:02:6d:7a:1c:30:7c:2f:b4:39:4d:
53:8d:a5:21:91:e9:f2:c4:6b:4e:ab:de:4e:85:d9:
37:cf:de:44:6c:eb:db:dd:bd:65:9f:1d:86:15:85:
85:c4:e4:78:4e:7c:69:9e:62:c3:21:9e:73:66:ad:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:C0:F9:85:8D:30:ED:B0:EE:27:6B:1C:86:54:E5:A7:C1:4F:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fa40:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ad:03:b6:d9:ba:02:93:67:9d:34:ca:ac:fd:46:d9:20:97:
5f:fc:d9:31:be:a0:d9:3a:34:1c:3a:21:a7:b3:99:6f:ed:66:
d3:17:d5:43:e5:fa:d2:1a:fc:81:ab:3c:68:c3:83:a2:36:c2:
d6:d3:a9:4d:a2:df:47:64:2a:79:43:86:9e:b6:58:0d:09:46:
51:75:02:93:74:b9:d5:29:fa:1c:ef:ac:da:ee:10:f3:30:cc:
4f:52:ed:f7:57:6d:dd:b6:f7:72:37:2a:22:d2:c3:08:00:9f:
4a:d8:5c:94:50:19:6c:f9:62:07:89:1a:b1:ce:fa:e0:4e:6b:
e7:81:d9:1c:5c:8b:a5:32:22:45:9c:fc:1e:4d:91:33:f2:65:
5f:24:7f:ad:96:36:8d:60:6e:d9:40:cf:f3:4f:22:d5:18:e0:
75:60:a4:fe:fe:48:96:00:7d:fd:35:f1:aa:dc:cf:e4:89:77:
4a:b8:03:ac:36:a3:43:f0:3d:01:5b:73:53:7c:94:2b:bd:d8:
d1:2d:e6:ca:b0:f9:12:03:d4:0f:bb:75:38:a6:7d:27:93:8e:
b4:9a:0f:d9:f1:e3:cf:f7:52:49:d2:20:85:e3:81:8e:4f:19:
7c:59:72:85:ed:5b:3f:88:92:10:17:95:dd:83:92:58:d8:53:
01:3a:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:39 2026 by rpki-client