
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
File: 4a1e23e9-0d4a-3576-945b-33f4492039a8.roa (raw, json)
Hash identifier: OOz0lBtcthnbYRjnLdCUqJlKhNMPNblAGt9dfhkOJLw=
Subject key identifier: 00:39:E8:9C:3B:BE:E3:97:5D:0D:36:37:3D:B8:0C:0E:34:18:79:95
Certificate issuer: /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial: 010D0C9F4328584F497482B720EB4A64D3B81DE0
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 2602:f4a8::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:82:b7:20:eb:4a:64:d3:b8:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=846a72f0-2ad6-42cf-86d1-88e1fd13eb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:60:d5:32:d6:ac:1a:d7:61:55:02:36:8f:
f8:db:ba:15:58:b3:e4:24:3d:f6:9b:79:8c:ba:62:
1d:dc:df:ee:ff:56:92:43:6f:36:d8:26:35:9f:9b:
07:22:ce:c6:61:f1:4d:6f:60:7f:7f:41:a5:35:7d:
7f:50:0b:bb:fd:75:ed:24:5d:cd:7b:56:00:91:4e:
9f:4d:84:63:25:44:b2:4c:9a:da:47:75:bf:9c:79:
da:8c:03:7f:1f:02:bf:3c:e7:4e:0b:7d:30:63:44:
3e:20:77:17:75:4f:f6:7a:d1:11:8d:5e:70:39:51:
d7:5c:fd:e2:6a:1a:6d:4b:e9:92:e2:d9:06:b8:f8:
4d:a8:48:54:37:e1:bb:22:c9:a8:d6:80:5a:77:f7:
f7:91:12:d4:1d:9a:de:a1:3a:ff:a4:d5:20:e3:c7:
d9:cb:66:ae:15:f1:76:fe:74:cd:e4:58:5a:cb:1e:
24:94:ff:5d:86:16:1b:c3:18:b8:68:dd:69:17:89:
4f:02:1f:54:b0:13:16:45:08:04:d1:12:f0:f5:95:
e3:77:ef:00:0e:cf:59:51:02:b3:14:a0:d6:75:ba:
16:1c:47:a3:0e:59:1f:02:e7:dc:20:4b:7c:2a:a4:
f4:77:9f:96:38:45:89:e7:ca:11:af:fd:97:dc:16:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:E8:9C:3B:BE:E3:97:5D:0D:36:37:3D:B8:0C:0E:34:18:79:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
X509v3 Authority Key Identifier:
keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f4a8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:12:a2:c7:fc:98:ba:b1:ed:95:c4:5e:47:04:f6:b5:99:c7:
66:d9:98:c3:4f:04:b5:f2:43:b0:e5:93:9f:73:48:e0:34:8d:
b3:4e:2e:23:1e:ca:31:72:a1:c8:6b:e2:11:51:2a:e0:a3:d5:
51:98:0d:7f:59:ce:36:28:21:19:7f:8d:c5:aa:54:14:03:3a:
87:b4:1c:a7:df:79:20:02:33:29:4b:98:2a:d9:3e:61:8e:0d:
fd:e4:a7:ba:61:7e:e4:fa:e3:01:08:6f:72:8e:84:94:d3:04:
5e:46:dd:27:6d:55:aa:b6:61:bc:8a:c7:0d:90:31:4f:f6:07:
6f:0d:4e:fd:5d:f0:6e:e0:72:eb:b1:14:13:b8:8c:83:b1:a9:
42:e7:96:2e:2a:4c:93:e7:0e:66:d4:01:c7:5c:cf:73:e6:29:
2a:3b:70:79:be:b0:f3:78:47:67:fd:c8:48:f8:53:04:3a:aa:
b9:d0:ce:bb:9e:67:bf:a0:47:ba:55:33:97:a1:a5:9a:05:a9:
6d:77:bc:64:5b:36:c0:5f:99:da:9f:dd:4a:0a:fe:fd:9b:d7:
63:05:30:25:2d:3a:b5:b2:51:f2:13:23:4b:a2:f2:96:17:e1:
f2:f2:7e:dd:90:81:9f:bd:d3:6e:51:cd:9b:79:06:a3:96:25:
86:f9:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:37 2026 by rpki-client