
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa
File: 4c28bf52-3847-383c-80d8-b4056870b8da.roa (raw, json)
Hash identifier: 5huJemhgW7/IlpG58kMGYldHOVv2QCnSMoD186g0MM4=
Subject key identifier: D9:E5:F3:A2:3F:22:E5:AA:58:A0:6F:2C:D5:49:8A:4F:C4:4C:3D:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3C10A5100AB2070B83A960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33287
IP address blocks: 2603:301d:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3c:10:a5:10:0a:b2:07:0b:83:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=de24f0b8-ca34-42c5-a9c2-160ddf66b43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:54:42:bf:6d:0a:ef:04:6f:84:53:ad:20:
1f:a4:a1:9a:41:89:08:f9:fd:18:eb:60:35:f1:b4:
be:49:83:01:63:5b:da:68:27:b9:4e:a1:eb:15:58:
f2:55:46:d9:91:b6:e3:aa:b0:79:dc:99:f8:54:8e:
ef:5e:2b:74:7a:8b:5b:d6:57:c8:d6:84:f4:26:7c:
2d:f4:9d:01:97:68:12:84:45:5a:01:af:35:88:0c:
40:27:dc:94:67:a1:ee:94:3c:3e:e1:4d:50:1f:03:
34:e1:ed:42:e7:22:2c:5e:ed:6d:95:02:4c:f1:8b:
e5:7e:4a:0d:42:c6:f6:1d:60:3c:15:e4:5a:36:e9:
6b:68:40:c9:e0:96:2e:0b:a7:25:75:ea:16:75:b0:
57:80:12:67:f8:56:a0:64:04:27:eb:f3:91:69:20:
d0:e7:47:cd:82:76:69:7e:76:a6:2d:b0:32:81:11:
19:02:4e:7c:19:e7:a9:56:a8:3d:c1:73:a6:f5:0f:
82:fd:d7:34:05:9c:55:87:a9:9f:fc:b4:a0:af:79:
ff:13:d2:db:f7:90:64:f9:84:fd:94:a3:86:fa:6f:
00:15:28:49:9a:9b:34:0f:b2:f0:12:f8:4a:d0:94:
c9:93:2a:74:a9:a5:66:2c:99:47:18:32:8c:e1:99:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:F3:A2:3F:22:E5:AA:58:A0:6F:2C:D5:49:8A:4F:C4:4C:3D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:83:06:13:52:46:87:cd:24:6f:c4:a0:73:be:30:35:42:29:
93:ae:4d:5b:2f:42:e2:9a:e8:da:b7:5d:71:73:d6:05:37:4c:
52:83:c2:16:4f:06:52:61:c8:42:66:16:ea:61:c5:b7:d7:1a:
40:8d:f2:97:e3:dc:3b:c5:1e:b0:7a:54:da:24:e3:68:7c:63:
5a:c7:e3:4a:05:2b:ff:49:94:df:98:13:ac:ed:db:b6:18:30:
43:0e:cc:8f:21:7c:b7:35:2a:ef:ce:2e:df:1a:a3:4c:ed:56:
35:86:71:42:89:ae:2e:02:c9:e0:26:ca:df:d0:c1:0a:f0:84:
67:45:c2:a8:26:62:f6:0e:3a:f4:8b:e5:fc:5a:f7:77:46:d6:
2e:31:46:b0:32:82:7a:97:84:37:fe:3a:7a:3f:34:65:34:3c:
c9:19:0c:58:45:af:01:79:f9:28:47:26:63:62:04:53:c2:3b:
bf:8f:2e:4b:e7:66:a7:bd:10:37:1a:12:46:97:d1:f5:28:d3:
a7:55:11:d5:33:a5:00:f9:30:85:98:27:b3:02:bc:d4:ff:f3:
9a:ba:2e:5e:c5:82:4f:c4:f5:8a:be:53:08:2e:cb:25:df:0b:
0c:77:dc:42:2f:8a:8d:6b:f3:eb:11:5d:9f:9a:3a:2e:fd:63:
e5:91:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:51:52 2026 by rpki-client