
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4306009c-e0ee-3348-a481-7bcc7b0f1c4d.roa
File: 4306009c-e0ee-3348-a481-7bcc7b0f1c4d.roa (raw, json)
Hash identifier: BNjlBv5idOxgInkhAhbUmyBT2wBV8iMXpDAABnCa5mc=
Subject key identifier: 54:56:BB:76:07:CF:C7:D7:2B:97:98:70:CB:40:61:5B:F5:43:C7:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA95E5233F0A096BFB5F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4306009c-e0ee-3348-a481-7bcc7b0f1c4d.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 2603:218f::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:95:e5:23:3f:0a:09:6b:fb:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e187a376-2f0d-45cc-8930-a6726eb75d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:e1:f1:39:81:7f:8e:5b:6c:8b:dc:aa:05:
d1:bb:7a:31:78:0b:c6:46:dc:a5:2e:0c:93:72:55:
94:52:72:26:f8:df:bd:4f:00:3e:70:e6:ab:1e:5d:
aa:95:48:39:e9:02:e9:9b:00:d5:ea:d1:92:8e:68:
ce:43:69:19:d3:30:66:9b:4a:97:46:e8:25:61:c1:
c5:8c:e1:ef:2c:53:56:2c:cc:a3:9f:36:5f:51:7a:
d3:4a:db:2c:d7:08:44:f0:0e:9d:78:78:43:9b:47:
ce:6f:bb:b2:db:db:ad:98:93:87:2c:7c:96:9c:c8:
f5:90:76:8b:73:3c:fd:36:51:b2:26:52:63:7f:54:
2c:9d:63:77:d0:db:d6:ad:b7:29:75:63:45:35:2c:
d3:94:b3:fa:e1:86:29:e8:c9:3a:fe:37:a7:52:25:
17:d8:58:29:4a:09:d0:0a:24:d0:54:86:66:3c:bc:
45:66:b1:25:99:98:bc:d7:7e:1f:e7:a4:16:18:25:
39:e2:54:3b:07:f4:57:d3:27:c3:1d:5b:1e:5e:66:
dc:e7:dc:6c:4b:61:82:51:b8:f2:75:cd:e4:49:12:
e0:21:77:c0:74:f6:48:e0:ff:61:8b:87:69:63:95:
ec:3d:8e:3c:c8:cd:1a:3e:a9:1a:d6:4f:27:b5:16:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:BB:76:07:CF:C7:D7:2B:97:98:70:CB:40:61:5B:F5:43:C7:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4306009c-e0ee-3348-a481-7bcc7b0f1c4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:218f::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:f5:3c:b7:21:27:7a:ff:86:48:c7:ad:90:65:d4:7c:57:d1:
19:56:d9:ef:45:62:34:e5:25:af:fc:2c:88:24:43:84:58:b3:
68:73:97:e2:2c:01:57:81:3e:b5:c9:86:06:7f:6d:bd:86:cd:
6c:43:bf:63:16:2f:a4:8c:86:3a:88:a2:fd:eb:07:15:d5:8b:
7d:17:52:02:8d:33:5e:bd:ef:e7:37:64:96:9c:4d:d0:3c:d9:
d0:b9:18:f0:0c:44:24:39:7f:4f:66:fb:0b:20:f9:61:2d:16:
c4:ac:21:7a:b7:2b:3f:ee:dc:b7:b1:35:c4:69:2a:07:64:ba:
34:6c:16:02:4b:ec:e6:c9:1d:cd:c4:9f:f4:2d:fc:32:5b:f0:
51:94:33:d4:b1:93:f8:3f:66:d5:e9:f9:ae:bc:24:7a:4a:88:
ef:06:65:dc:43:0b:27:d7:cb:4c:cd:42:73:db:12:66:64:f4:
9c:18:74:bb:f8:17:7c:be:85:70:27:fa:89:18:00:00:c2:d5:
fd:33:22:4c:cf:5a:cf:cc:2d:98:36:25:98:f4:ba:a7:d7:9c:
47:18:a6:43:b5:53:18:48:db:2f:b4:9e:c9:fc:62:65:7c:53:
3f:11:33:37:55:30:bb:3a:7d:ae:67:69:2f:64:dd:49:d3:34:
33:8a:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:39:07 2026 by rpki-client