
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
File: 7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa (raw, json)
Hash identifier: mFa9pn41zw7cvAxJ02wy1U1HVQe0GWf62sMAfe2XuS8=
Subject key identifier: 51:8A:C8:0D:AC:7C:DC:EE:FE:A1:8E:83:C3:41:78:0B:30:31:0B:1D
Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial: 010D0C9F4328584F82ADB29F02AA5DA8EF575B80
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 397894
IP address blocks: 2607:f4a8:200d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:b2:9f:02:aa:5d:a8:ef:57:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=cb92aa8c-e9cd-4078-856d-7c898cab1930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:1f:ca:b4:80:b8:18:28:c9:67:ca:83:03:
8d:0f:d9:69:d8:8d:ae:59:63:85:eb:56:22:a8:88:
b3:d7:5d:0d:82:9e:d7:8c:ad:26:58:52:9d:12:6a:
70:32:4b:6d:05:ea:9a:0a:3f:50:66:21:5d:2c:85:
e0:9e:88:1a:9c:7c:88:a7:a8:a9:c0:a1:b5:51:91:
34:f2:da:d3:ce:00:1d:12:48:e4:a5:94:7a:b9:48:
d5:ab:05:e1:48:2f:e5:60:f9:3f:0b:c4:e4:45:d0:
8b:de:14:af:51:b9:3a:7d:18:6e:2b:ef:23:aa:f2:
21:a9:b7:6f:95:7b:5b:6c:a2:60:fe:18:99:bb:72:
69:4e:fb:2d:a6:4c:40:1b:99:6d:88:2a:bb:64:60:
55:83:84:dc:63:6a:23:59:f0:98:42:71:51:97:14:
2e:3c:36:8f:c1:42:55:ae:d8:7e:53:a4:fb:f7:ca:
76:ed:bd:c6:7c:91:22:2d:67:ef:56:76:1f:40:62:
02:bf:3f:6c:ab:47:68:63:0c:ec:4a:ce:15:fd:17:
39:b4:48:dd:ea:e7:08:2a:5d:e5:37:da:42:e0:c4:
35:0c:18:f2:b3:80:e2:d7:fa:2f:80:d9:92:c7:1a:
0e:fe:d9:12:95:d1:8d:6f:b4:b4:8b:df:28:f3:5d:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:C8:0D:AC:7C:DC:EE:FE:A1:8E:83:C3:41:78:0B:30:31:0B:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
X509v3 Authority Key Identifier:
keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f4a8:200d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:23:5c:ba:14:20:50:56:e7:e8:95:2c:57:43:67:5d:c4:8f:
85:92:45:c3:1c:f7:db:59:f9:31:5b:73:99:39:b8:ab:8f:6e:
07:7e:3f:be:ba:29:3a:d6:da:e1:82:40:55:19:f8:3b:ea:93:
22:d4:1a:6a:bb:d0:92:7e:d8:7a:9e:fc:78:20:b3:7d:9b:89:
b5:6f:b9:4c:2a:e7:6f:60:96:40:54:8c:d6:11:c0:78:36:be:
9f:58:d3:7b:f1:b3:e2:fc:c0:ee:ed:e8:bd:e5:ae:47:75:cf:
06:a7:f0:07:ad:96:ad:3b:be:00:ee:ed:17:e1:c4:b5:2d:7a:
57:68:32:c1:60:26:b1:f4:f0:b3:2e:a9:d5:1c:e6:73:55:56:
c7:9b:87:07:79:db:6b:30:af:d9:e9:3d:7d:94:85:b8:f7:1e:
b7:0e:f5:a8:ef:eb:dc:02:28:52:49:8c:68:ef:29:97:25:cc:
cc:37:b5:91:74:9d:43:46:10:28:36:13:cf:1e:3c:2a:d7:02:
74:cf:e7:85:19:b8:1c:db:9b:16:08:72:84:46:bf:b6:01:44:
2c:3a:1d:b3:a4:ed:6a:ce:42:74:0a:b4:bf:45:67:40:90:44:
17:bd:4d:43:05:04:bf:dd:4d:c0:45:0c:41:60:27:d7:46:66:
53:11:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:42 2026 by rpki-client