
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
File: bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json)
Hash identifier: cWBVdxvcgE/IkQbmWPBp8kzkjvlFxuiqCs6dXaC4kWQ=
Subject key identifier: E7:7D:ED:57:12:EB:E8:B8:63:D9:CA:CF:0D:53:33:87:78:1D:92:80
Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial: 010D0C9F4328584EA79C435C7B6690E4EB1C5100
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 401082
IP address blocks: 2602:f8b4::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:43:5c:7b:66:90:e4:eb:1c:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4b602e9e-ec0f-4bcf-b6b2-9bd5ac227112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:ab:d4:2c:2d:da:1b:09:64:fa:9c:38:57:
8b:86:64:d9:a0:41:42:de:95:1e:af:2f:25:55:48:
97:93:c0:69:b5:da:f1:3a:78:6a:04:37:6e:71:ff:
65:4c:96:60:f4:5e:86:27:c1:ec:22:31:6d:b4:c4:
20:4f:d7:d1:96:e4:a1:0c:be:64:cf:d2:1b:f5:5d:
12:24:8d:8d:9a:5a:ad:9e:05:7d:a5:f6:6d:02:20:
d6:ef:ac:10:07:fb:c6:66:cc:eb:e7:d4:cf:e9:b9:
09:20:f2:64:2b:20:cf:75:6e:aa:a5:06:46:49:05:
b9:21:28:51:7d:bd:b0:57:58:44:96:8f:2a:5b:f8:
0b:34:8f:77:b4:fd:b3:15:6e:32:b3:2f:cd:74:a3:
0c:30:81:85:82:b0:bb:a7:e1:26:d9:43:d6:b8:1f:
3c:fa:50:07:39:f4:f8:91:dd:6f:32:73:a6:5a:c0:
3e:e5:14:b7:85:d0:aa:ab:29:9c:38:84:d8:56:84:
36:58:a2:33:1d:bb:b8:c4:23:4d:ca:54:27:cf:96:
0f:66:14:bd:46:ef:42:8f:40:b2:7d:c1:83:33:17:
99:7c:2b:d7:90:63:cd:57:02:e9:dd:56:a0:c0:86:
42:17:ae:7c:d9:4c:72:3c:07:ec:5b:ca:78:dc:9c:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:ED:57:12:EB:E8:B8:63:D9:CA:CF:0D:53:33:87:78:1D:92:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
X509v3 Authority Key Identifier:
keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8b4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:db:12:1c:99:53:06:ed:d0:f0:8c:1d:76:cf:43:b0:5b:91:
a0:8e:67:f4:88:cd:da:bc:24:28:bb:af:d6:bb:7a:32:be:44:
2a:b5:45:4a:9f:e2:a7:7c:d4:93:4f:28:a1:3c:84:84:61:7f:
66:c8:03:94:93:53:76:81:ab:69:12:9f:54:85:61:aa:e4:01:
47:3b:97:6c:c7:8c:ed:c1:6f:db:23:ac:b5:59:d3:87:4f:28:
66:21:cc:7c:3d:bd:89:0d:7e:5c:06:4e:84:dd:34:36:be:5e:
47:6b:88:3a:7f:da:bd:35:63:ff:72:36:6d:5b:f2:ff:6f:20:
6e:f6:9c:a4:d5:55:59:86:87:d6:a8:74:06:aa:b1:1b:58:32:
53:ef:2b:e4:14:1f:cc:af:cf:e9:c3:cd:26:81:5d:0c:a5:bc:
96:bd:da:1c:1a:61:a8:5e:7e:aa:b2:a6:c6:db:af:51:bb:83:
5f:e7:af:ca:14:95:44:ae:f8:ae:7c:7f:cd:cf:5c:23:67:82:
a1:c0:a5:27:ac:47:f0:de:92:ff:ec:9d:54:9b:1f:8b:a2:fa:
0c:03:9d:34:54:e5:82:07:fe:e8:05:c4:8a:17:a7:eb:85:e5:
85:fe:c7:97:a5:6b:bd:a8:b5:9f:36:a7:88:fc:33:82:3b:a1:
c2:fe:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:40 2026 by rpki-client