
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45250a93-9073-398a-a38b-848c5d1fa474.roa
File: 45250a93-9073-398a-a38b-848c5d1fa474.roa (raw, json)
Hash identifier: XzB7X4vXRrnkQJKRs+LjuTmJrrOJX5rK63tOW48eTt4=
Subject key identifier: F9:F5:F3:D2:96:00:D2:4E:96:E4:95:D5:63:60:66:5B:DE:37:6E:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78EBC6EA0C57554ED2A0440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45250a93-9073-398a-a38b-848c5d1fa474.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33659
IP address blocks: 2001:559:c073::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8e:bc:6e:a0:c5:75:54:ed:2a:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d97e8b7f-e8ea-4467-9724-0c1e235a748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:10:bf:2e:13:08:74:a1:63:2e:23:5e:b1:
1e:58:4c:07:94:f1:24:d1:9f:c0:de:84:98:1a:b3:
f5:a3:ed:d1:ab:5d:b5:ed:78:77:9a:20:b2:4f:2b:
1b:68:d4:c2:5f:c9:20:28:e0:ae:da:29:e9:75:1d:
47:94:da:e9:6f:a0:2d:d6:58:c9:f3:70:0c:14:54:
07:f0:13:af:a5:c7:30:8e:45:03:94:36:48:f0:27:
fc:1a:d1:90:e0:c6:35:07:fe:36:f9:98:99:12:18:
6c:99:55:df:68:6b:db:c8:3d:5d:dd:bd:30:9d:36:
8c:5a:96:38:de:9b:1b:a4:50:ab:b3:a6:61:14:eb:
14:f5:7d:d0:71:8b:1a:d9:ac:65:3b:a6:a1:4e:a5:
bc:48:5d:52:7b:8e:fc:a8:0e:ed:74:8c:77:7a:83:
cd:e3:69:7d:ea:5c:1e:2d:4e:a0:48:8f:a3:fd:bb:
16:50:72:ea:c9:dc:8c:01:b5:4c:b2:53:7c:c7:83:
04:b1:92:30:c0:4c:b9:86:ef:93:61:9a:1e:ca:41:
98:1d:12:d3:d5:b6:56:f2:d1:65:5b:c5:86:dc:58:
75:c0:72:4e:56:c8:89:1d:74:59:85:42:de:05:96:
f6:2f:78:12:7c:57:6d:0b:af:6b:8d:e0:a1:f8:97:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:F3:D2:96:00:D2:4E:96:E4:95:D5:63:60:66:5B:DE:37:6E:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45250a93-9073-398a-a38b-848c5d1fa474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c073::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:44:8b:52:9c:85:e5:0d:94:fd:fe:27:27:09:0d:2f:99:e1:
04:fb:53:cc:99:53:46:46:cc:b1:f5:cf:87:f6:d8:41:21:23:
09:cb:3c:55:d0:27:7d:43:15:46:14:eb:a5:9b:ab:d2:a5:a4:
3a:b4:9a:4d:f6:20:87:ee:2c:fe:05:c3:bd:ae:43:2a:cb:f1:
4e:f9:2a:5c:89:af:00:20:70:2f:a3:32:5a:c9:a6:db:50:c0:
40:4f:1f:bf:ff:76:ea:1c:03:e3:b9:f6:30:ff:84:6b:00:21:
29:17:c3:cb:dd:67:b8:68:6c:cd:84:b9:4f:7f:ac:ef:47:0e:
12:64:bc:0d:93:cd:d5:61:87:3a:21:d7:ae:b4:33:e5:fc:de:
f8:a1:60:c5:f7:e4:3e:ab:07:50:f9:0a:bb:9f:c7:46:70:36:
7f:19:94:53:79:aa:10:20:c0:75:9d:96:5b:1e:35:56:68:da:
19:72:f3:66:3f:cc:5a:54:70:47:a5:55:8d:f7:85:17:03:8d:
ce:e4:fa:73:0a:68:f7:ae:ec:bb:79:10:35:23:cc:a3:a5:cc:
3c:8a:28:51:3b:da:f2:75:b6:f2:0b:01:23:8b:4a:f7:70:6d:
c9:25:67:4d:10:cc:68:f1:25:d2:67:9b:77:42:5a:80:ec:22:
45:e5:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:50:30 2026 by rpki-client