
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File: 43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier: Z1ztZ3sE3I8X9qqPlSOYpGKom7mt4TcW1o2W258/wsg=
Subject key identifier: CA:79:61:F2:3D:D8:B0:22:1E:CC:5A:B6:5D:38:32:BA:76:08:F6:F7
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584EBDDC5B8818A3DB5B7CADF7C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time: Thu 06 Aug 2026 01:00:12 +0000
ROA not before: Thu 06 Aug 2026 01:00:12 +0000
ROA not after: Wed 04 Nov 2026 02:00:12 +0000
asID: 10865
IP address blocks: 66.129.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:dc:5b:88:18:a3:db:5b:7c:ad:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Aug 6 01:00:12 2026 GMT
Not After : Nov 4 02:00:12 2026 GMT
Subject: CN=491ca908-3c53-4ec5-8102-cabf50c5ef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:d5:34:93:63:8d:bc:ab:01:b8:38:89:23:
33:76:df:b9:dd:7d:ea:e3:b4:92:91:1c:44:e9:d9:
f6:93:94:d1:bf:d2:7f:a2:bb:db:75:4a:89:ea:2c:
dd:a0:3f:86:37:38:fb:95:26:75:9e:0e:8e:ba:1e:
76:24:01:ed:7a:e1:61:2d:da:c7:d6:77:85:6f:c9:
0d:ef:d2:5f:13:9f:3d:88:7a:12:80:74:71:43:80:
04:97:5b:55:52:cb:57:8f:22:0f:c2:e9:30:8a:79:
3c:95:f9:d4:db:a3:cf:f8:84:22:be:10:26:20:30:
09:d9:4c:a8:b9:ca:c4:65:52:36:96:32:37:63:dc:
bd:e6:ac:19:6b:4f:e6:92:ab:34:55:5d:0e:38:5b:
d3:ed:2e:18:6d:82:a0:90:89:1e:cb:83:02:da:21:
11:34:90:5c:3d:36:63:83:10:28:6b:37:bf:a8:62:
01:5b:ac:72:32:6c:04:12:30:f2:28:73:e7:96:7c:
af:fc:0d:54:a8:da:d1:30:65:f3:f6:b3:4b:1a:b5:
2c:12:f1:4b:6a:c9:86:07:7c:f3:57:90:6f:4b:5b:
0c:dc:6a:f7:f0:7a:ff:22:5c:57:b2:d3:93:9b:92:
36:05:ea:53:de:92:49:06:7f:d0:5b:2b:df:e3:cc:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:61:F2:3D:D8:B0:22:1E:CC:5A:B6:5D:38:32:BA:76:08:F6:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.129.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c1:73:52:da:63:d1:bb:60:5e:ca:96:4c:f8:ad:c4:ce:bf:
d8:d0:6d:61:a6:aa:08:fe:36:7e:61:4f:37:eb:d8:64:50:26:
64:5a:57:f6:5a:93:ec:e0:2a:ad:0e:d7:a2:59:5a:96:7a:60:
65:4b:df:c8:e3:fc:a6:86:87:fc:af:15:c5:39:83:ef:85:57:
16:0d:59:22:56:a0:23:6d:ec:4f:cb:b1:61:0f:2f:59:df:59:
40:bd:38:29:11:33:38:6f:bc:2a:79:ee:20:85:81:ea:4f:0d:
42:4d:e4:94:f3:0d:a1:8c:c8:fb:93:0a:87:ee:49:8c:fa:98:
b8:f1:47:df:77:71:c6:f1:35:20:d6:92:a2:b4:95:6b:6a:fb:
8f:c4:db:1f:6d:59:b0:e7:7e:e4:20:0c:96:17:56:61:9b:29:
77:48:44:8b:f3:7f:f8:5a:97:ae:28:0b:b1:4d:4b:71:95:73:
42:76:d4:47:c4:cd:a1:b1:96:e8:4e:20:99:59:c7:15:b0:7d:
ee:36:d7:01:42:76:64:d9:c9:19:df:10:b7:8e:b1:69:16:5d:
a8:f1:69:d5:0f:03:82:b0:8d:02:ef:03:3c:78:bb:aa:6a:93:
fc:ea:09:39:18:67:e2:aa:ad:ec:58:2c:79:b4:44:cd:bf:45:
cf:75:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:50:08 2026 by rpki-client