
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa
File: d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json)
Hash identifier: +inwIohSwGHUF0yGa2I0m16PVCso1NnY3m67vNiUbqA=
Subject key identifier: 93:86:AD:B9:1D:1D:38:2F:30:8F:D3:00:99:B8:4E:06:80:D6:37:7D
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F4328584EB2B1AB31540FEBAB06A98180
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 16433
IP address blocks: 2605:f00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:ab:31:54:0f:eb:ab:06:a9:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=7aed7213-e74c-4a84-a2da-1030ba85befb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:76:cd:e5:34:f5:9f:9b:db:37:32:fd:52:
23:cc:cc:7f:13:04:36:23:2c:b7:40:e2:0d:e8:d2:
22:7b:23:6e:7c:dc:28:4a:9b:f1:4a:9a:44:fe:8b:
f9:89:85:3a:7d:bc:b1:18:71:48:6c:b7:03:37:a2:
28:51:43:4c:b0:11:a1:b5:a8:4f:6c:df:be:8e:6f:
7a:12:f6:0b:0f:9e:e4:1e:7d:08:1f:ad:ac:00:0a:
01:0d:e8:6a:de:5b:77:20:14:8e:89:32:bf:d0:1d:
76:23:b7:ad:2d:86:fb:c6:9e:6e:fd:5a:80:6f:ce:
a2:31:8c:4c:ba:0f:f4:cf:97:35:03:09:80:54:ed:
b8:9c:d6:7a:2a:68:98:b7:78:1e:c2:e6:96:b6:59:
38:5d:34:4e:6c:0a:37:9d:b4:40:c3:f9:84:b2:f5:
4b:c4:c0:e8:83:28:a6:34:ea:d5:99:09:b7:0c:bb:
cc:a2:12:4d:a5:cb:97:9b:57:de:b5:f3:eb:48:15:
3c:23:f6:a5:74:a9:e7:52:23:25:01:a2:0d:4e:41:
e5:6a:7e:da:96:99:b8:4d:46:f7:19:91:63:02:69:
12:93:9d:d7:e3:96:19:45:16:fc:cc:40:61:e5:03:
45:75:fa:2f:73:04:3e:45:fe:1c:b7:1d:1c:69:2b:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:AD:B9:1D:1D:38:2F:30:8F:D3:00:99:B8:4E:06:80:D6:37:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:f00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:52:24:23:ba:b1:24:ec:d9:c5:59:82:30:69:58:3c:c1:30:
3f:17:58:d0:ff:45:0f:3f:5e:bc:1d:36:1f:50:c8:63:83:ab:
e9:a4:9e:09:b6:d8:37:f3:7f:29:e9:53:4d:d3:59:3d:ef:62:
88:26:15:f6:b0:aa:3c:8c:08:c5:a9:c8:f7:39:d2:f4:4e:0a:
3a:35:91:49:17:6f:9c:c7:4e:d5:b2:6a:f5:14:56:cf:b9:b3:
d9:8b:fc:25:5e:62:b9:f1:92:c4:f3:36:b6:87:20:6a:8a:4d:
4f:40:ac:76:79:99:fa:54:68:df:fa:db:6e:c1:73:22:07:47:
9e:01:31:ec:e1:55:80:7a:ce:10:02:b8:5c:18:5c:a4:a3:2d:
2f:9c:58:3f:6f:7f:2d:4c:ea:01:ab:11:c2:ae:86:15:40:db:
c4:e8:c5:bb:35:46:9e:09:f7:de:c3:91:ea:a2:d5:0e:8d:69:
88:cc:84:56:c7:1a:35:52:c2:e5:2e:91:96:1b:79:db:16:9d:
80:56:c7:cf:fa:f9:b3:48:2a:1b:99:21:95:07:02:36:49:81:
b8:97:cf:a5:8d:fb:03:ee:cd:bb:14:c7:2a:19:e5:5e:31:ed:
84:06:de:f1:3f:e7:43:69:2a:6e:51:04:f3:23:a9:53:e3:01:
37:08:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:54 2026 by rpki-client