
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ecd7822-cf7a-3443-982d-c260ac094ded.roa
File: 4ecd7822-cf7a-3443-982d-c260ac094ded.roa (raw, json)
Hash identifier: DYA/JshIJReN5aC2VlnxLT39BwTLcytRK3kVBfEZRYE=
Subject key identifier: AF:71:8F:0A:EF:BE:0D:3E:9F:C7:E6:70:70:55:EE:5D:40:3F:D2:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4980F8948594280050327980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ecd7822-cf7a-3443-982d-c260ac094ded.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 2001:559:8242::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:80:f8:94:85:94:28:00:50:32:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2ab60255-d72c-4db0-b302-82ce35ab52f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:be:d1:62:22:cd:2c:33:b4:f4:94:6d:a6:
b8:d7:46:4a:f6:b9:3c:7c:fc:c1:5b:31:83:80:88:
b8:bf:51:ba:9b:23:52:51:94:dc:99:99:dc:a9:f3:
a0:85:86:6d:d3:1c:73:fc:1e:51:d0:34:ff:47:2e:
f3:47:4e:83:ef:a0:32:dc:c5:56:41:82:e3:97:08:
d3:99:d1:53:52:91:77:b5:3e:17:42:e6:75:fa:81:
da:61:c7:ff:e2:10:b2:39:21:2a:ac:28:d1:1b:34:
65:46:05:b3:02:76:7b:1c:26:3d:8c:31:6b:85:d4:
be:4f:73:0d:0f:c1:88:e2:b2:b9:e5:55:fd:87:b9:
d8:ed:2d:77:b9:e7:e2:df:8c:94:2a:2c:ee:b6:3b:
47:bc:bd:e5:7a:ba:28:96:81:99:cc:83:1d:5f:f7:
c4:a4:12:69:fc:06:d8:cf:2f:23:29:b7:7b:7d:96:
a1:44:ce:07:de:46:b1:5d:71:61:4e:f4:f5:aa:09:
d1:f4:05:12:52:c6:91:73:28:0a:ff:f6:42:f7:2c:
0a:43:6e:7b:c2:aa:7c:f2:14:38:d2:4a:9e:1f:9a:
60:40:1c:40:d5:dc:2c:71:4e:60:ca:d7:9f:4d:d7:
9b:7b:93:75:12:7d:41:03:05:ff:f3:1a:e4:9f:db:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:8F:0A:EF:BE:0D:3E:9F:C7:E6:70:70:55:EE:5D:40:3F:D2:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ecd7822-cf7a-3443-982d-c260ac094ded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8242::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:77:95:b5:8a:79:66:c1:d1:29:3c:8c:f1:d4:13:c9:fc:a2:
7f:bb:79:44:8c:15:c6:68:48:45:fe:99:46:30:21:c5:1a:6d:
ed:6d:05:0c:69:0c:9d:f1:c6:35:13:b5:13:11:4d:6b:c4:27:
66:1a:9a:5e:ff:59:d2:ff:0b:9d:a6:c4:98:5b:d9:c5:ad:cc:
3a:fc:80:2c:b4:ad:8d:0f:03:43:40:b8:93:2a:7b:5c:dd:c3:
c1:c9:4b:f9:97:42:b6:99:a5:fe:06:0d:c0:78:5f:7a:14:1c:
a8:2a:1b:3a:c1:cd:07:af:4e:f1:26:f6:d2:11:e5:67:69:88:
2b:87:cc:72:ff:39:d5:9b:86:03:11:0b:cd:7d:ba:0e:5d:61:
ca:8d:54:28:61:0e:43:ba:ee:f9:81:3b:e5:af:f3:26:4b:3f:
1c:7a:a4:eb:17:2e:2a:03:86:3b:b4:1e:70:92:94:e0:0e:8a:
f9:cb:b9:b0:ed:3d:9b:ab:63:29:8c:16:b2:bf:71:d9:0a:90:
96:3c:8c:b5:b6:b2:bf:62:a9:81:55:d8:18:a9:bd:73:42:2c:
e4:ef:80:cd:6c:5c:fb:b5:aa:67:b8:32:7c:67:e0:56:8b:0b:
ad:54:82:4f:c0:27:26:a5:5c:05:1f:63:ed:fe:36:13:de:a7:
e6:ea:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:46:11 2026 by rpki-client