
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/befd0e1c-d6fb-3baf-9fc1-ebd499475b96.roa
File: befd0e1c-d6fb-3baf-9fc1-ebd499475b96.roa (raw, json)
Hash identifier: Ppg1tqWynIq1pofe+0RuXnkX7/MwoiQtZwc5RmLhR70=
Subject key identifier: BA:2B:F4:BF:59:50:30:FD:3C:7D:35:BC:27:0A:BD:61:39:F1:DB:7A
Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial: 010D0C9F4328584F9E989BD922938FC70763A180
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/befd0e1c-d6fb-3baf-9fc1-ebd499475b96.roa
Signing time: Sun 25 Oct 2026 13:00:13 +0000
ROA not before: Sun 25 Oct 2026 13:00:13 +0000
ROA not after: Sat 23 Jan 2027 14:00:13 +0000
asID: 1299
IP address blocks: 2604:f100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9e:98:9b:d9:22:93:8f:c7:07:63:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Validity
Not Before: Oct 25 13:00:13 2026 GMT
Not After : Jan 23 14:00:13 2027 GMT
Subject: CN=6037b102-450c-4176-88f8-3fb17791e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:cb:27:12:69:2b:6d:69:74:0c:06:34:48:
d8:6d:40:57:20:29:9a:94:67:dc:5b:74:e3:98:13:
c0:87:60:fa:bd:7d:71:cf:5d:d8:eb:f2:cb:27:85:
9b:94:36:ce:5e:61:d1:df:d7:9a:2b:21:fe:d8:b0:
5e:33:47:39:b5:9a:eb:a6:c7:ed:c4:ad:d4:66:17:
85:e6:05:d2:ff:49:f2:6e:6f:f0:61:1e:c4:f6:f5:
bd:01:db:89:fe:76:4c:4e:5c:c3:cb:e4:54:20:7d:
00:01:55:0f:be:53:e5:e8:1d:07:3b:eb:d0:fc:82:
94:5b:c3:91:69:a9:c3:a6:d1:cb:e6:dc:25:6f:51:
97:40:5b:fa:01:9f:a1:20:df:81:69:ed:c4:7a:ca:
7f:68:31:97:0c:4a:61:ba:cd:ed:f9:1f:63:c3:96:
a3:fe:3c:e0:19:1e:87:f3:5e:4c:71:68:d3:76:86:
02:b7:56:45:00:5a:39:c2:17:64:40:94:9a:8a:02:
c8:79:89:c4:cf:3e:df:56:4f:17:0f:c9:fc:49:0b:
29:76:3d:91:42:34:97:e2:ed:70:e0:ea:da:c8:db:
19:17:4f:7e:a3:dd:22:1f:97:9c:64:67:58:a6:32:
22:ea:56:07:78:ba:e6:43:86:66:43:c1:bb:31:d7:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:F4:BF:59:50:30:FD:3C:7D:35:BC:27:0A:BD:61:39:F1:DB:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/befd0e1c-d6fb-3baf-9fc1-ebd499475b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
X509v3 Authority Key Identifier:
keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f100::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:84:ab:37:e9:c7:4b:08:08:58:26:2a:86:58:c5:5a:7d:f0:
c0:9f:70:a9:2d:70:a4:a3:f2:27:a5:4b:8c:d3:a3:2b:1f:61:
c3:74:29:1e:c0:d2:25:ae:ce:0b:0a:e8:9b:00:1c:ac:83:c2:
ea:d8:88:87:68:56:f9:4b:84:e4:a0:dc:3a:9e:78:5c:a3:d2:
d0:f7:14:d5:00:21:2d:a9:64:b7:a4:25:df:5b:35:73:0f:06:
e2:4e:c7:81:67:c8:a7:37:37:61:40:ed:f2:cb:0f:11:1b:46:
f3:9b:65:a1:b4:ad:ef:16:da:c3:0d:7e:3f:8b:48:87:d0:04:
37:a8:44:77:29:6a:55:12:24:be:08:d4:30:d0:0a:2c:54:3c:
28:a0:20:de:10:13:d8:1c:fa:57:1f:35:28:51:6d:bb:62:13:
8c:c9:46:d7:31:fb:3c:e7:a4:ce:33:53:fe:8c:5f:13:78:9a:
af:eb:54:1a:30:5c:e4:f5:70:22:d2:18:ac:49:cd:a4:d6:e4:
27:a2:fe:db:43:2a:d6:e2:39:57:e7:5e:1b:25:5a:9a:9e:0f:
32:fa:d0:f9:72:95:96:9b:03:a7:26:06:de:16:60:54:75:28:
4d:ed:0c:14:b7:b3:fc:3e:eb:cc:87:9d:2e:2b:29:31:d1:97:
a9:b8:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:59:26 2026 by rpki-client