
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc33d47-3045-38b6-abf7-296bb6dde020.roa
File: 0dc33d47-3045-38b6-abf7-296bb6dde020.roa (raw, json)
Hash identifier: QgoWT1d9SOSHmc3+eL3bEKpg0KFzFTWjEJGJHBzxGS4=
Subject key identifier: AD:21:7A:1E:37:93:36:8E:46:F6:3C:86:C8:60:A4:78:AD:10:EF:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E31CF509FC2F0556EC3AC29C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc33d47-3045-38b6-abf7-296bb6dde020.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 22258
IP address blocks: 2601:3c2:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:50:9f:c2:f0:55:6e:c3:ac:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=5281f06f-eeb8-41dc-a9c2-73f8a1eee269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:57:2c:13:0a:4b:ac:a8:e2:d6:50:94:06:
28:c4:60:06:4d:1f:76:96:b0:93:2e:bd:9f:08:e0:
a5:8c:ac:f7:04:7f:9f:cc:cb:b3:d1:e7:45:b8:e5:
f9:04:dc:94:2c:29:e1:c7:dd:0b:9b:a6:57:f6:00:
c2:99:34:8c:b7:ba:6f:f9:14:40:1a:93:4a:37:48:
1d:46:da:0e:c7:0b:19:c7:85:c9:0f:eb:51:4b:0b:
a6:b2:48:54:20:b2:75:dd:4c:3f:7f:b4:10:c3:b2:
8b:b1:5e:65:db:c9:08:ee:79:20:8d:a6:59:98:ea:
04:34:b8:9a:ed:30:23:3a:d9:9d:e9:9f:5f:7e:1e:
de:d1:a9:6f:a9:a9:56:ab:01:6e:ef:bb:95:a5:72:
0f:05:54:1c:49:a1:2d:9c:21:a1:c3:be:8b:e9:f3:
08:10:90:fa:0d:dd:91:2c:14:e5:ba:c3:bc:2e:ce:
d0:77:78:2f:4f:14:8e:61:3e:ed:ad:3b:4a:2f:72:
d2:79:00:1f:9c:94:8e:b9:32:f5:03:69:63:6d:20:
c2:75:89:93:3f:a1:d0:f3:92:85:c5:80:c7:ce:0f:
2e:b6:a7:ab:73:41:ad:0b:0f:5a:cf:3d:ce:1e:07:
46:2a:a7:6b:cc:24:d6:d6:a1:fb:52:43:ab:28:fd:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:7A:1E:37:93:36:8E:46:F6:3C:86:C8:60:A4:78:AD:10:EF:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc33d47-3045-38b6-abf7-296bb6dde020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:3c2:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:bd:bc:87:23:b5:9e:8e:6a:8a:71:d9:21:c6:07:da:6e:d0:
bb:ef:42:7c:67:19:71:cf:7b:48:e2:6b:f8:bc:f8:86:c7:c8:
69:aa:99:6d:51:d4:9d:4c:ba:7c:e2:e6:7f:22:9c:7e:82:e3:
57:82:2c:fb:20:3a:5e:f5:1c:cc:fe:2c:08:58:d0:2d:b3:c8:
4c:4c:a8:ab:d6:2f:d5:92:b3:ff:3d:48:05:cb:35:c0:f6:61:
1e:8e:9f:d2:0b:6d:ec:4b:cc:4c:73:a1:c3:8b:a9:fe:cd:c2:
ca:68:26:92:0e:54:4e:52:27:75:0c:5e:ef:14:b4:6f:98:1f:
cc:82:be:0c:2e:b4:6e:59:63:26:ce:39:87:6a:b7:d2:06:64:
0a:f3:ef:24:c6:6c:c5:54:39:e5:c5:87:e6:02:f5:a8:c5:82:
e4:83:9e:ee:ee:6b:fe:1c:b6:15:b5:15:b3:10:f0:72:34:45:
c0:37:cf:99:70:96:76:32:4f:29:69:24:6c:78:f9:89:36:99:
ed:34:ca:07:7a:69:94:0e:c6:70:ca:e2:81:0b:4f:e5:39:87:
ae:08:49:1d:bc:e6:ba:6f:12:71:a2:9c:9c:b4:64:3e:03:64:
7a:8d:e4:c3:9d:4f:7a:59:12:85:d6:0e:89:a6:ce:56:da:12:
44:f4:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:21:55 2026 by rpki-client