
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/fa8bfd84-6b37-3b94-8c7b-a1f8d1d1cbea.roa
File: fa8bfd84-6b37-3b94-8c7b-a1f8d1d1cbea.roa (raw, json)
Hash identifier: gOxlcIRnik9+mHzJKnqNM8sVMClJewa7o4S3Ygx9xZ0=
Subject key identifier: E4:70:94:D4:24:CE:09:D2:43:58:86:B6:07:05:86:01:3F:FF:04:30
Certificate issuer: /CN=e871808f-d4e7-40d3-a9bf-6fb419ae00a0
Certificate serial: 010D0C9F4328584EA7885D4BEF678B0617B58580
Authority key identifier: 97:8D:04:97:76:50:71:6B:CC:F9:DD:46:FF:02:E6:13:53:CA:D5:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/fa8bfd84-6b37-3b94-8c7b-a1f8d1d1cbea.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 889
IP address blocks: 2606:de40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:5d:4b:ef:67:8b:06:17:b5:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871808f-d4e7-40d3-a9bf-6fb419ae00a0
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b402e9aa-b041-43d2-8911-0464bb4c9ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:f0:a9:12:88:d2:5c:68:7b:cb:98:ab:c6:
b9:96:65:03:50:54:12:18:f3:4a:c9:60:7e:61:e7:
63:06:85:a0:bd:0a:b8:af:3d:76:61:e1:e3:db:14:
67:22:b1:90:b4:36:2e:e8:6b:91:69:d1:7f:1a:a6:
24:18:85:d8:be:a6:ca:17:2f:ad:a0:98:13:f2:22:
e6:09:a0:ee:ce:8c:54:f0:c4:d8:87:b3:aa:89:33:
53:d0:ae:23:ad:c1:7c:ff:36:20:f5:4a:8c:a5:db:
76:5a:91:82:1d:15:19:a3:22:45:27:06:70:a5:16:
21:d7:cf:ea:b2:2e:c9:87:d7:5d:30:4a:e4:23:52:
dc:f3:32:f5:f0:8d:83:cc:7a:41:ee:6d:14:34:e6:
8a:3f:29:bf:80:9c:c1:55:3f:aa:9d:ac:ec:aa:b5:
3b:21:f1:e8:a0:24:08:35:69:1a:53:7e:65:5a:ad:
ae:ff:13:62:70:b8:8e:65:a0:b6:5d:39:8c:e8:2f:
f7:06:4c:f8:25:4d:be:73:f9:8c:29:a6:fd:4d:a5:
cc:c0:fc:c7:30:d5:f1:48:5d:a6:bb:5c:f6:70:f0:
c1:fc:72:f0:ab:b4:55:f5:31:19:e9:dc:8c:b3:2a:
10:ef:ad:bc:eb:b8:ac:af:6f:d9:cb:26:35:05:77:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:94:D4:24:CE:09:D2:43:58:86:B6:07:05:86:01:3F:FF:04:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/fa8bfd84-6b37-3b94-8c7b-a1f8d1d1cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.crl
X509v3 Authority Key Identifier:
keyid:97:8D:04:97:76:50:71:6B:CC:F9:DD:46:FF:02:E6:13:53:CA:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e871808f-d4e7-40d3-a9bf-6fb419ae00a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:de40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:65:c8:e8:3d:7a:83:b2:c2:c6:b2:56:1a:56:f8:28:05:e7:
7f:11:ca:57:9a:ed:c7:d4:e4:f1:25:e2:e4:6f:72:6a:be:55:
3e:53:41:a1:bd:52:d0:a9:65:20:37:39:2e:25:80:fc:0f:c4:
2f:65:6c:79:18:d7:38:06:29:f3:12:69:0b:87:b6:aa:be:1e:
aa:2b:b4:1a:e2:e7:45:1a:d8:07:b8:97:3d:68:e4:14:6a:8b:
01:6d:28:90:8c:48:52:69:aa:f7:86:dc:f1:ed:37:5f:94:19:
d6:17:0e:29:f6:71:6f:df:9a:89:48:c0:ac:d5:7a:36:0c:7f:
ed:20:14:f6:36:0b:d6:1a:84:d3:94:3e:cb:37:24:34:93:66:
96:c7:47:a1:79:1c:bc:11:1e:ba:a0:64:83:28:6a:e2:ff:e7:
70:50:2f:84:14:00:c5:d7:8a:fd:59:e8:7b:9f:00:42:9d:78:
97:a0:26:b0:4e:df:37:ce:11:50:61:4f:3c:59:a0:74:3a:5b:
f6:d8:46:79:e3:ff:cd:73:ee:4a:92:f7:2c:cf:a0:01:0e:7f:
3e:c6:64:00:46:1d:51:9f:06:9f:4f:4c:4d:80:2d:71:2b:96:
a7:4d:af:ad:90:8c:8e:ae:97:fd:10:bf:0d:d9:73:8e:44:6e:
92:18:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:36:36 2026 by rpki-client