
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0328fc66-5049-37ff-966c-f9077133afa3.roa
File: 0328fc66-5049-37ff-966c-f9077133afa3.roa (raw, json)
Hash identifier: jt7QNykGi0ThUu9fHl1mjpr9J2jZBW914DY5XxvYIF4=
Subject key identifier: 50:62:E0:6B:DF:63:8C:C9:B1:C5:A7:CF:52:57:3D:64:84:CF:CD:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F778300A6428BB1D22C1E47C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0328fc66-5049-37ff-966c-f9077133afa3.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 22258
IP address blocks: 2603:3014:2100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:00:a6:42:8b:b1:d2:2c:1e:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=b69ae3d8-bbdc-4a73-a78e-3176fab35558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:30:7e:8f:4f:76:3d:d8:44:b4:5a:f6:5a:
ca:35:de:b0:87:c3:1e:73:ae:46:36:ff:eb:d1:a2:
c4:24:1b:8a:d6:00:7f:02:9a:87:fb:70:93:38:30:
c2:8e:a6:f0:1e:d8:0b:f6:0a:a5:d7:04:21:49:f9:
53:0a:6d:b9:fa:c3:93:4a:52:11:c2:db:50:72:ef:
52:76:45:27:d3:3b:b2:ca:01:7e:b6:6d:f8:68:15:
f1:4e:d3:e3:35:1d:0e:8f:3f:77:8b:20:4e:99:ca:
ef:97:11:2a:35:49:de:ef:5e:c8:4b:8c:4d:73:ae:
9d:85:54:54:28:38:d2:07:71:37:9e:99:f5:22:03:
56:5e:91:98:e5:0a:aa:ee:5b:e7:8a:7c:fb:2e:1c:
92:66:02:89:dc:88:6d:9e:10:25:ad:d2:96:e4:50:
f6:6c:0f:db:34:fe:19:da:f9:2d:ca:f6:ff:4e:c5:
fd:fa:63:a3:b4:0e:87:d5:4e:21:da:41:d3:db:2f:
a4:24:8e:bf:24:76:75:6b:a2:0b:d6:9a:08:b7:af:
41:b6:ff:72:8f:22:a7:0d:4d:13:90:be:c6:fd:8a:
75:3b:7f:ec:13:bb:81:a4:7e:40:3b:64:a6:80:64:
aa:fd:cd:36:e9:ba:78:11:fa:8d:e1:4d:b0:23:fd:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:62:E0:6B:DF:63:8C:C9:B1:C5:A7:CF:52:57:3D:64:84:CF:CD:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0328fc66-5049-37ff-966c-f9077133afa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3014:2100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:c2:ac:0b:79:11:d7:d5:66:64:24:1d:04:94:4f:81:83:55:
d4:1a:a3:0c:9d:cf:31:d6:6c:a9:c2:e6:ca:26:18:01:18:a4:
fb:13:25:85:8b:1f:69:ad:d5:2c:1c:e6:94:48:5c:a6:76:59:
fc:4f:15:9b:80:a4:5d:65:6a:6b:b1:85:52:d4:15:ef:8b:b7:
b7:56:e4:86:fe:10:44:28:e2:f2:4e:7f:3a:7b:15:f4:ba:3b:
30:8b:a2:be:f7:86:73:09:e1:97:db:86:a3:40:10:0b:81:ce:
2c:9e:63:12:43:14:ba:90:59:45:b2:2d:6d:a1:92:7d:da:aa:
16:6c:68:2c:db:40:79:89:e4:f2:f8:b4:71:43:04:63:17:16:
d6:ac:28:4e:56:ce:5a:94:9f:f4:78:4e:8d:28:17:dd:3c:79:
bb:fd:7c:12:fa:6a:e9:c2:43:2e:b2:07:c9:fc:fb:96:d0:82:
51:4f:fe:ca:49:6f:ff:78:4e:d7:4d:db:f6:ce:d8:eb:89:2a:
0f:a1:b9:1f:f7:de:a7:05:d7:4b:a9:fb:3c:67:83:3f:da:62:
d3:ea:95:0f:2b:e5:28:d8:dc:63:9c:30:7b:54:f0:78:6b:4f:
97:10:86:e6:88:75:90:31:b7:c9:98:92:21:a2:63:24:18:27:
23:d9:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:21:57 2026 by rpki-client