
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
File: dfb9926d-6216-3b2e-836f-c99868aba2de.roa (raw, json)
Hash identifier: gxbTMTMU/hBxRLPgEg5+SjxvSL7GKd9YLoW4mORCoB4=
Subject key identifier: 6C:9B:EA:53:41:60:4A:61:DD:E3:83:0A:58:F2:D2:DE:EF:79:94:85
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584E1E449CD6D57D7D4FCDD58780
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
Signing time: Tue 09 Jun 2026 21:00:12 +0000
ROA not before: Tue 09 Jun 2026 21:00:12 +0000
ROA not after: Mon 07 Sep 2026 21:00:12 +0000
asID: 36137
IP address blocks: 2600:bc04::/32 maxlen: 100
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:44:9c:d6:d5:7d:7d:4f:cd:d5:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jun 9 21:00:12 2026 GMT
Not After : Sep 7 21:00:12 2026 GMT
Subject: CN=92f1a10c-3718-43d7-8aeb-700debe4c374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:dc:c7:65:48:70:21:da:7a:6c:19:99:18:
d2:64:ba:76:ae:a7:95:5b:ed:f8:48:49:50:21:4c:
ef:14:66:58:13:94:3a:bb:65:2a:25:cb:ac:a4:3c:
f3:67:3c:2c:95:45:a1:25:a9:a6:5f:4a:2f:5a:68:
a6:cf:99:98:94:1b:65:42:3a:06:05:49:bc:14:fd:
f3:3d:08:e8:86:f8:81:e1:64:f3:2d:fe:8d:01:cb:
ba:1a:85:b1:9a:05:74:6a:1f:91:ec:0c:86:a0:86:
db:ed:6c:28:7e:a3:69:8c:49:74:2f:0a:fe:18:6a:
ca:1e:82:2d:cb:d0:e8:ff:89:1a:aa:bb:4b:29:4a:
bf:cd:2a:3a:ed:a2:ed:93:34:34:9f:5a:cc:c6:89:
26:d4:ab:f6:d0:8f:f7:24:e1:e6:06:6c:33:a5:c2:
da:63:c7:73:77:4b:00:4f:28:2c:7d:92:ef:26:0d:
d9:48:e7:0a:da:64:18:50:7d:f9:bf:02:1c:f7:f4:
c5:d8:33:72:dd:a9:3a:32:27:2f:85:65:85:88:6e:
ca:01:1a:1e:a9:25:fa:80:61:b1:8c:d3:d0:00:50:
b9:8a:a0:36:1b:05:c1:e7:0e:77:3d:59:0c:10:46:
e6:67:ca:ac:fb:79:fd:40:a2:a6:ad:f3:f9:f8:e6:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:EA:53:41:60:4A:61:DD:E3:83:0A:58:F2:D2:DE:EF:79:94:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:bc04::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f2:f2:b8:41:3e:55:c4:19:4e:12:66:70:99:e2:47:df:74:
d8:ff:fd:17:fd:f6:25:5c:e5:f1:55:95:71:47:ba:24:2a:54:
fd:1f:69:68:89:65:bc:86:99:c5:3e:cc:dd:f0:74:b3:2a:db:
04:44:f9:91:1e:9c:36:54:95:3d:5f:5e:5b:b5:fc:da:c2:f3:
48:d7:75:c6:3f:17:da:de:8d:d4:e6:6b:8b:01:7b:0b:9f:86:
98:e8:fd:82:76:b1:56:df:64:89:f2:ed:34:fe:8e:48:40:72:
bd:da:5d:5a:a0:1b:f9:05:47:19:a8:47:0d:63:c4:0b:06:f9:
6c:60:c9:9a:dd:c3:8f:06:00:4f:a5:05:97:6d:31:a1:74:23:
9a:cc:08:06:8e:b0:aa:ce:ef:e6:59:26:f9:fe:1a:19:1a:b0:
2d:70:c5:29:2e:27:f1:c9:ec:c7:eb:eb:b8:7b:b5:84:03:10:
48:fa:c3:55:a3:bd:7c:bf:35:42:2e:cf:2e:d5:47:e0:fe:ce:
3a:7c:8f:34:e0:de:0f:15:6c:d3:a0:d9:f3:89:e9:28:08:27:
10:1b:f4:ad:82:62:29:1a:f3:68:99:34:6b:d2:f5:1e:63:59:
bf:69:dd:63:85:b5:6c:d3:64:b7:9d:2e:62:ed:46:da:b3:36:
77:6c:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:25:26 2026 by rpki-client