
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7846e6de-b7f7-3d58-8ec7-907516f11a93.roa
File: 7846e6de-b7f7-3d58-8ec7-907516f11a93.roa (raw, json)
Hash identifier: Ub6Rj2belKfn3SEdVSlJh3VO8BArnBzm7CCu71E45Iw=
Subject key identifier: 18:27:89:3E:E7:6B:E5:73:4A:CF:AB:2B:86:B6:11:4F:3D:55:57:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E55D7812FBD2F83B4BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7846e6de-b7f7-3d58-8ec7-907516f11a93.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 2601:40d::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:55:d7:81:2f:bd:2f:83:b4:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=2c634699-668a-4a18-aa8c-66bd4f518d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:72:0f:49:d1:1d:a4:e6:09:a4:d2:dd:6e:
e5:09:04:65:5d:7d:86:ac:76:04:7c:9b:b6:44:55:
af:2a:30:07:6a:09:18:bb:59:3a:dc:3f:62:6c:1f:
21:03:7d:15:8c:ed:58:c5:78:80:0c:60:6e:58:44:
51:08:73:82:7a:d1:3b:5f:ea:1d:4c:77:67:43:d4:
d3:0b:18:9b:c1:de:10:a3:ee:6e:3e:c0:11:42:97:
58:13:77:26:13:f5:9c:d1:5e:ae:bc:52:30:94:22:
ef:14:ec:53:c3:d6:1b:7e:b1:53:3c:96:6b:e7:8a:
e0:e5:91:f7:96:e4:9b:5b:83:0b:95:46:fe:3e:a3:
d9:02:5d:58:64:28:c8:c0:93:5f:91:79:11:d4:16:
fe:0c:20:b4:3a:61:3e:cd:15:18:8a:7f:e4:80:c3:
73:86:05:46:c5:af:5d:e9:3b:6b:51:2c:d4:eb:36:
27:14:07:e2:2e:12:9a:90:1d:93:24:8e:f6:53:4c:
1f:cf:17:57:00:08:ab:f8:51:d0:e5:9a:5a:32:8a:
ba:b1:56:f3:70:ad:dc:93:84:94:51:2d:b2:eb:01:
fd:49:45:77:97:c3:47:54:f5:c4:e9:7f:d5:d0:fc:
d4:77:fd:14:c5:8a:c3:44:81:4f:c4:a8:d4:65:88:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:89:3E:E7:6B:E5:73:4A:CF:AB:2B:86:B6:11:4F:3D:55:57:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7846e6de-b7f7-3d58-8ec7-907516f11a93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:40d::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:80:3f:19:2a:8d:f5:64:51:cd:44:16:fb:8e:75:bb:d7:85:
30:71:c8:60:4c:77:76:c7:8e:e8:2c:48:fa:c8:d8:ba:93:1e:
b5:cb:04:92:62:11:0f:38:de:a3:3d:87:c4:fb:9a:e8:d1:85:
6c:37:b2:d8:05:ce:1e:50:33:20:4f:78:18:c8:8d:e3:6c:24:
3f:1c:6f:fd:c0:f3:3d:88:1d:72:53:38:59:a4:05:53:62:2e:
6f:ec:4e:25:e7:37:b5:d9:b9:a7:c7:80:76:f9:bc:68:6f:48:
b4:49:12:82:f7:43:68:3c:dc:c7:9b:f2:ed:76:39:c1:d4:67:
04:5a:2b:29:35:bd:c1:0e:50:06:09:0e:04:e3:e9:8c:52:14:
77:82:33:72:dc:7e:0e:7d:fe:f5:38:74:1a:7b:a4:17:0c:67:
a8:cd:f9:0f:2d:9b:7d:f9:b2:5e:fe:ef:f7:10:80:87:66:30:
a7:13:4f:45:6c:1e:4d:55:a0:19:92:a5:46:f5:55:c6:e3:5a:
e7:4d:72:75:98:50:e6:63:e3:e2:e0:93:76:5f:4a:ea:73:27:
8e:71:bc:1e:71:d3:19:cb:f8:43:3b:b7:1e:ba:e0:ce:5b:b8:
3d:1f:19:d8:eb:f7:fb:99:c8:41:e9:e2:de:02:e7:5b:d2:77:
4f:61:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:11:57 2026 by rpki-client