
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
File: dfb9926d-6216-3b2e-836f-c99868aba2de.roa (raw, json)
Hash identifier: KZASP8mXr5k7vsqVMNaERkNfGksLLOSILHlEQWnc+OQ=
Subject key identifier: DB:FF:B6:C8:2C:53:DF:8A:86:6F:F2:B9:17:02:D8:78:5D:AA:68:95
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F62931C6D27964DF989F5A1B0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 36137
IP address blocks: 2600:bc04::/32 maxlen: 100
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:93:1c:6d:27:96:4d:f9:89:f5:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=845ac2f2-d3ce-45e8-ad8d-6fc8266b1320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:da:e9:ff:15:1e:e2:80:6e:5d:93:0e:d3:
f4:c1:5e:9f:35:04:51:27:20:5a:e2:6f:65:ce:b5:
bc:71:f9:72:32:b9:88:57:4e:ea:6c:9d:85:ae:de:
e3:ac:1c:9b:8a:82:4e:e4:ee:11:68:35:c9:17:bd:
aa:9e:ec:e3:80:b5:6c:54:a3:d1:28:1c:01:72:87:
bf:c6:eb:d8:a4:19:ee:94:dc:a4:11:d5:ad:81:17:
9e:20:f2:21:af:ad:10:04:ad:30:e1:5b:99:87:30:
08:77:ac:cf:aa:ca:f1:c9:9f:64:8a:f7:a5:54:64:
ad:fa:f7:0c:d5:67:72:af:b1:64:fb:03:53:7a:d2:
7b:16:9d:7d:47:c6:5a:da:3d:e9:65:98:13:5e:72:
55:1a:48:2c:6c:f1:d8:f6:d6:02:17:53:a5:7f:cb:
48:28:e6:71:e3:cd:03:06:d4:5e:fb:94:3b:3e:8c:
24:94:d1:d5:61:76:be:e4:de:eb:22:d1:75:e2:a2:
13:0f:f6:26:c7:ac:e4:5f:7a:a0:82:c6:a6:6d:dc:
38:fb:69:4e:d2:e1:1a:24:f6:fd:23:71:fa:73:e4:
04:e7:47:97:4d:93:07:5a:15:a1:07:2e:df:68:54:
e4:f8:bd:15:92:21:c6:9c:41:c1:21:7a:9f:a4:8f:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:B6:C8:2C:53:DF:8A:86:6F:F2:B9:17:02:D8:78:5D:AA:68:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:bc04::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ff:5d:5e:7f:6b:60:6e:3c:ba:a9:fb:d7:ee:94:94:66:3e:
82:12:9f:11:d2:7c:2b:09:2b:2b:e1:1f:e1:96:6e:47:aa:a7:
4b:54:73:1c:d8:4a:fb:57:33:4b:c7:41:12:a7:8d:fc:20:ee:
f5:d7:57:a9:cf:b5:a3:6d:1d:35:95:2f:e5:2a:2d:b0:70:7c:
d6:2a:e1:39:76:cd:de:c7:dc:a6:7a:d7:58:1e:4d:5f:85:92:
c3:e7:26:54:0b:bd:3c:fd:3a:6f:d9:d3:5e:c7:d7:4d:bb:9f:
eb:83:3e:cd:87:34:c9:63:53:19:e1:c9:a0:95:b2:df:29:30:
d1:e9:91:24:dd:13:bd:38:76:06:71:6a:0e:d8:c1:3e:95:48:
46:2d:51:05:e5:9f:95:d1:79:d9:0a:66:ec:5b:b6:6a:99:18:
86:e6:0a:a9:44:71:6a:25:d0:18:45:c0:f6:5c:b1:36:fe:b7:
0c:16:d4:cc:b2:ab:92:c4:ce:d3:8c:be:26:9a:1b:bd:d8:5c:
bb:a9:fa:db:55:a4:e2:b3:05:f9:88:3e:66:64:f8:01:ac:3a:
1d:52:c2:32:c0:5e:21:8f:d9:ee:27:52:d6:f8:8a:85:41:33:
f6:87:a1:04:5a:61:03:f3:89:b3:b9:79:e5:2a:c6:dd:09:7d:
57:e8:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:09:28 2026 by rpki-client