
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa
File: 16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa (raw, json)
Hash identifier: 7weWvaU7wnUWqlwyTaqxAeXvDUKizrQH5+jV/8tx+RQ=
Subject key identifier: 42:CD:73:89:D3:59:2B:51:3B:BA:92:57:CF:62:3A:42:D4:95:87:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497F6943FAC6818AE152EE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36040
IP address blocks: 2001:559:0:78::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:69:43:fa:c6:81:8a:e1:52:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c65c31f6-310a-4c53-ac63-6ff39a7461d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:16:50:f7:e6:b2:ff:2e:b4:69:4f:0f:53:
d5:9c:e6:81:a7:9b:d9:64:63:2f:80:76:aa:a2:05:
05:44:91:a6:60:0e:42:5e:52:cc:55:98:da:45:77:
1d:06:5e:03:71:b5:79:bb:82:34:e7:66:b4:59:03:
8d:5f:ca:8d:9e:52:f5:91:85:0d:58:55:e0:61:ae:
54:c7:c7:67:3d:bb:87:77:5b:83:99:14:f7:4d:92:
ef:27:c0:2b:1d:59:09:ba:86:01:cb:29:65:c9:91:
46:c7:97:52:09:f9:55:10:85:67:ec:79:69:d9:b9:
d1:0b:2a:9f:82:b5:0a:47:11:25:5d:df:94:67:7a:
d6:68:54:ea:d1:8b:d8:98:79:a8:10:54:a0:fe:91:
83:7e:ee:de:9d:26:94:10:1a:72:e0:e9:74:b6:e1:
1b:38:f7:1f:23:b6:06:a0:d5:fd:13:38:ee:8c:0d:
7a:02:76:f1:9b:dd:54:02:9d:a6:dc:84:83:48:3a:
37:ed:06:01:35:ce:ad:1b:2f:90:78:1b:62:fd:1c:
3c:92:0a:c5:37:4c:ff:00:50:f3:08:c1:69:da:61:
08:06:23:a8:05:7e:33:e2:b5:f5:68:f8:a9:ed:e1:
c9:8a:18:17:25:4d:d8:37:2b:80:c8:47:68:93:10:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:73:89:D3:59:2B:51:3B:BA:92:57:CF:62:3A:42:D4:95:87:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:0:78::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:53:93:18:a5:60:c9:15:bd:a5:d5:9a:63:c3:74:a4:91:0c:
a0:ca:86:77:7b:f8:32:49:c9:73:f6:13:7f:0e:1a:de:0c:7c:
01:6f:8f:d6:8a:15:de:70:d4:04:2a:a3:4c:d8:62:95:13:72:
a8:2d:c9:02:ac:07:9b:87:4f:4d:99:29:2c:75:7a:65:ba:4e:
87:f4:73:88:a3:6a:85:84:e7:1d:dc:21:ae:14:53:a5:0f:7e:
d1:6f:27:ed:91:bc:79:a0:30:8c:3e:ad:3f:63:5d:f7:92:79:
3e:02:ca:d9:7a:2d:29:62:5f:1f:91:84:f4:29:9c:54:e5:33:
de:c8:12:4f:ac:b1:d5:44:6e:95:3e:bd:42:01:fa:50:3c:a3:
71:00:21:fe:ff:cb:11:57:60:8e:d1:cc:76:95:bc:79:05:36:
6e:56:b7:e2:50:56:4b:c5:8b:dd:59:06:3d:3c:d0:ac:65:93:
5c:f1:09:ce:26:f5:b1:e7:69:c5:9e:f3:d6:e1:e5:e5:54:7f:
a9:f2:1c:0e:99:96:04:d7:57:6c:37:39:aa:cc:be:a0:fe:f0:
7a:41:88:05:53:af:d7:8f:3f:f4:9f:2c:b5:f2:c4:14:af:03:
91:0b:1d:9c:39:4c:ec:ed:ba:35:8d:9e:77:f9:09:73:a1:8c:
06:28:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 14:45:29 2026 by rpki-client