
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa
File: cf3991eb-5972-3d30-bfbd-8698044dccec.roa (raw, json)
Hash identifier: l3ZVUbMJhujzb0De5SXsXu6c5EiEZvtvTAWh0fkddaI=
Subject key identifier: C7:07:F7:A1:F6:19:1D:BB:61:B1:49:06:73:88:AD:B3:DF:B7:9E:4F
Certificate issuer: /CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b
Certificate serial: 010D0C9F4328584EAA519A745DDAE2C9024779E8
Authority key identifier: 2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 46685
IP address blocks: 68.65.240.0/21 maxlen: 32
199.68.104.0/21 maxlen: 32
2602:fbeb::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:9a:74:5d:da:e2:c9:02:47:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=6d291998-4c80-47f8-9dd2-d7eb70135d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:22:16:8a:03:f0:09:f0:fc:d0:b8:9a:88:
51:08:79:cb:ea:44:cb:f0:35:ff:28:c2:0a:54:bb:
a0:5c:8e:62:7d:fb:cf:43:9a:d2:18:a0:3b:dc:df:
ab:06:6e:38:50:da:e6:1f:0a:c4:dd:47:7d:e8:f8:
fc:f0:3e:9f:f8:37:c5:b2:a8:36:90:73:94:dc:cd:
19:e6:b6:18:ab:3a:40:d6:5f:2c:cf:e4:ba:1d:6a:
53:07:c8:94:99:c0:ef:b7:65:3f:40:a9:4b:41:e4:
c3:88:bf:a2:f4:69:60:52:3c:e5:67:18:36:17:99:
d6:b3:55:09:d7:15:38:ae:20:91:d6:8e:6f:e6:86:
59:30:7f:8b:d3:79:8c:57:80:4c:57:18:6a:dd:6f:
bf:f3:1d:62:a3:1b:df:26:f6:d2:85:64:55:28:ee:
ae:b1:62:55:6a:33:3e:2f:59:3c:a4:93:ef:3f:92:
18:b3:42:ab:ef:6c:53:ab:5c:84:fb:7f:72:c8:a0:
2f:34:c8:6e:f3:9a:14:f0:2b:f1:ca:6b:9d:ee:8b:
1f:29:b8:81:52:b2:26:f4:c3:d1:c1:15:ab:b6:9a:
0b:9b:a9:27:02:b7:e1:c9:14:00:e2:47:9d:77:80:
1d:28:97:c1:b5:5b:a4:63:a4:77:79:cd:95:db:3a:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:F7:A1:F6:19:1D:BB:61:B1:49:06:73:88:AD:B3:DF:B7:9E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl
X509v3 Authority Key Identifier:
keyid:2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.240.0/21
199.68.104.0/21
IPv6:
2602:fbeb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:00:37:9a:8b:ce:94:fa:e3:cf:54:43:75:19:63:75:8c:15:
92:a0:fd:94:e9:0d:7f:ad:25:ee:e9:b7:03:47:6e:5f:4e:68:
6e:bb:a4:92:51:c3:f2:6f:81:0b:dc:10:eb:cd:4f:85:0b:e0:
1f:75:fd:21:8c:6d:2a:ae:ca:90:33:92:7d:0f:a5:1e:01:61:
33:ac:4e:fb:8f:93:1a:4b:9a:9a:88:02:e7:bd:56:05:eb:c7:
6b:b0:fb:ca:70:81:48:cb:5d:13:bb:09:08:44:83:ae:31:73:
85:9a:38:ec:34:58:b2:81:b4:42:18:af:cf:19:15:0d:fa:5d:
45:87:83:a6:9a:69:09:e2:cd:c7:6e:c9:e0:95:6e:c0:f7:74:
ca:9b:4b:a5:b3:e2:4c:0a:66:42:89:5c:22:11:07:b4:87:3a:
80:67:e8:01:05:cc:f2:18:20:17:f3:37:35:cf:10:a4:9a:b2:
d0:bb:f0:25:30:30:9d:f1:58:b3:2b:4e:53:b4:95:61:4a:32:
bd:0c:de:f2:0c:6c:8b:e7:f2:dd:6f:ba:19:cb:b6:2a:7c:ae:
7f:0e:45:eb:76:9b:d3:2a:ec:15:c0:dd:ce:c6:f2:d4:d1:34:
78:8c:1e:1e:b5:5d:fc:aa:6e:f9:48:43:b1:78:6b:f8:3f:08:
8a:4b:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:04 2026 by rpki-client