
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
File: 3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json)
Hash identifier: HypC2eQs7UJCnnmn5wFkoe0i7vmPL4hdsmHn/J99Z5Q=
Subject key identifier: 2A:9E:71:13:1C:89:92:94:4D:87:AE:0F:50:2C:E0:65:BA:D8:8E:1F
Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Certificate serial: 010D0C9F4328584F6F230975CEE5B29476503900
Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 19518
IP address blocks: 2605:1500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:23:09:75:ce:e5:b2:94:76:50:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=34835d6d-954c-4bbd-b4de-7471120fb4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:6b:f6:d9:25:3f:05:3a:55:7c:0f:a2:f2:
69:24:cc:52:73:42:5f:9f:a2:4f:01:dd:11:be:1b:
11:26:f6:c3:1a:7c:21:0e:a9:93:54:5a:43:88:66:
29:56:22:43:e3:2c:7b:61:b9:40:2f:d9:74:a0:2b:
be:65:ce:fd:a0:ef:7b:dc:77:81:a7:86:84:bb:31:
d1:55:19:b7:59:a7:9f:c2:14:1c:1a:dd:18:4c:26:
8e:eb:3f:be:eb:c2:dc:5f:f4:74:0a:77:7d:5a:aa:
97:9d:07:68:21:fb:47:9b:81:ca:56:2d:fb:ba:dd:
0a:ed:82:93:38:fe:c1:2a:df:dc:30:01:3a:91:a1:
37:1e:bc:4f:55:fd:bb:70:db:5c:3e:60:83:9b:23:
2b:2f:78:7c:70:91:50:93:7b:72:98:ff:d7:6b:f6:
86:76:2e:2a:5b:2a:63:b3:d5:8a:02:42:d1:a7:af:
e4:df:c0:f8:c1:82:78:3d:b5:4a:94:ea:8d:d1:50:
65:a5:1c:c1:11:8e:fc:1e:8a:e4:c9:93:dc:1c:c5:
b1:e4:bb:f3:53:0b:b4:5d:96:46:db:73:73:05:8b:
19:0b:64:af:43:11:0c:66:3f:eb:21:d1:d2:27:52:
37:e6:ba:72:de:b4:9e:4c:ae:25:6b:66:86:70:49:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:71:13:1C:89:92:94:4D:87:AE:0F:50:2C:E0:65:BA:D8:8E:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
X509v3 Authority Key Identifier:
keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:1500::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:47:07:9d:d6:69:98:77:64:c0:90:04:8c:11:ab:04:10:36:
83:18:db:70:a5:93:fe:ff:fe:45:72:d5:d8:a8:82:ab:f1:84:
8c:3d:cd:f0:20:31:39:9d:8f:35:77:63:02:7e:1a:3c:1c:2f:
6d:7d:6e:68:b5:e9:fe:84:bf:7b:33:6b:73:4e:76:86:eb:3c:
f4:d6:b2:f8:6b:fe:09:51:08:61:80:5b:48:3d:54:0b:2d:d5:
9b:fd:e5:74:97:e6:c7:06:58:0a:4b:ed:e8:51:cc:15:8c:ce:
ba:11:25:3e:1c:c7:5b:58:86:b5:5c:a7:2a:5d:68:4d:f4:0d:
02:a2:0c:82:63:17:44:7e:08:d1:ba:70:6f:b1:79:3a:88:83:
a7:b5:a7:a4:4d:26:53:22:d5:88:f7:8b:38:55:d9:ab:d5:1e:
1a:8f:d2:84:0c:98:df:da:75:ae:0d:9f:08:41:63:3a:16:a3:
55:a4:c4:27:23:1b:45:8c:ad:22:68:4e:08:98:ee:06:d3:57:
27:c3:1e:b0:bd:1f:1b:93:ca:d1:f5:03:d7:58:1d:4e:6d:6c:
95:ec:38:35:8d:fb:d7:de:b8:09:fa:90:35:45:3e:d7:3d:46:
3a:83:cd:97:2e:b8:12:c9:ab:cc:a0:7b:d0:66:53:0c:53:e8:
20:e2:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:59:16 2026 by rpki-client