
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
File: 35ec1831-5758-3354-b185-9ab807b853f2.roa (raw, json)
Hash identifier: U+jFfxy9ygPg4eKg+y1l4LPhVxze4Vs7dv39omGRcw4=
Subject key identifier: CE:18:49:BB:9B:6E:9E:2D:48:18:5E:F7:30:37:59:8F:6B:35:D0:6A
Certificate issuer: /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial: 010D0C9F4328584F6292CAFB6CFFA291C6563F80
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 397045
IP address blocks: 199.233.129.0/24 maxlen: 24
2602:801:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:ca:fb:6c:ff:a2:91:c6:56:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=1fbc18e7-1a07-4439-b0cd-da8d449e5ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f1:4f:64:49:3d:4c:a1:a8:86:17:df:e7:07:
a4:c1:33:70:ca:c7:2e:76:4a:86:fd:04:09:83:e8:
a7:d2:2e:1b:16:f9:28:c1:81:45:3e:d5:c0:d2:b2:
74:4e:18:a3:91:98:1a:49:f0:30:65:b8:a1:65:2e:
37:c7:85:e6:6d:3b:5c:d1:05:f7:10:9b:57:b0:6b:
60:bd:3f:53:af:c4:c3:69:0d:e3:63:30:69:52:14:
7a:1d:53:c0:e7:63:3d:ee:11:e0:56:d0:69:75:e8:
8d:8e:58:51:a4:35:fd:db:f2:33:36:78:ae:0b:32:
d6:0c:f5:43:f2:6f:40:0a:8f:91:cb:40:22:1e:9c:
0a:ec:e1:14:74:06:13:39:b8:a6:a6:cc:7d:7c:f2:
e9:e0:3e:32:90:73:25:ab:3c:ef:9a:c1:25:15:20:
15:dc:7e:7b:f0:12:6e:a8:bd:88:d1:2b:0d:4a:45:
fc:fb:5a:7e:8e:4d:8a:8a:43:b4:87:9c:a2:69:d2:
ab:68:a3:ce:aa:d4:a5:8b:67:bf:7a:33:00:a0:97:
c2:a5:13:be:ea:38:90:ee:2f:37:ca:f7:56:50:7b:
20:71:7b:6f:7e:c9:2b:f5:9a:ca:6b:25:87:6e:dd:
4f:22:b6:33:88:46:4d:63:2e:73:c2:41:24:a3:9a:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:49:BB:9B:6E:9E:2D:48:18:5E:F7:30:37:59:8F:6B:35:D0:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
X509v3 Authority Key Identifier:
keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.233.129.0/24
IPv6:
2602:801:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2a:12:78:10:19:89:64:ae:26:66:a1:44:36:79:c9:4e:1a:
0b:af:e5:70:71:06:29:3e:b1:06:55:e5:50:99:1c:b5:19:48:
28:c0:d6:dc:4a:35:22:17:79:7e:c2:80:17:2c:1b:fa:e2:fc:
3e:fb:b5:93:68:3d:74:bc:ee:2e:1d:21:c0:db:6c:0c:50:35:
5f:6d:ce:c3:fe:d0:fd:47:0e:e3:2a:e6:eb:3f:9b:e1:a5:e5:
1a:5c:97:b7:d7:ae:20:a8:01:5d:8b:c4:80:24:ef:8d:a8:f4:
e1:d1:31:db:36:28:05:f1:ce:d9:b1:a7:e7:09:7f:24:b4:57:
34:8c:33:e6:2b:bb:e7:a6:7a:a1:57:eb:9e:4e:a7:d4:9d:e0:
0a:48:54:5f:a2:d5:bc:6b:95:9e:d4:e2:eb:42:b7:3d:dc:e0:
e0:08:ff:6e:52:55:ed:8b:ec:2a:c3:07:e7:5d:43:8f:43:bb:
79:d9:b0:e3:41:74:9e:0d:9e:49:5e:be:f5:b6:87:c9:14:c4:
2d:cd:7b:d8:b3:ee:4b:7b:7d:26:8f:e1:8c:15:69:1b:6e:d0:
78:6d:f6:ea:98:da:fc:43:22:97:1f:8f:4c:7e:da:42:05:21:
65:1d:c8:dc:dc:ae:c8:1d:c1:88:37:ff:0b:18:ed:ce:48:0d:
83:e2:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:36:01 2026 by rpki-client