
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
File: 8665210a-3e79-3ad7-a3e4-1f37a81be149.roa (raw, json)
Hash identifier: WZQdOWa7W5lx7SPTrtCf/xqCUGskJXAlcKcBdb5BR/A=
Subject key identifier: 03:BD:84:6C:08:68:D5:34:35:45:A7:10:8C:ED:0C:52:74:3F:24:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF5DA9518263D9EE21DD940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33659
IP address blocks: 2603:208c:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:da:95:18:26:3d:9e:e2:1d:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=103d84e5-eae5-44a6-ba07-710b202b60e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:f4:aa:c3:f4:b2:43:3d:6f:d8:29:6e:b9:
66:b7:e5:ab:dc:b2:75:95:13:3c:01:95:a5:b1:94:
f8:e2:76:80:ff:02:07:0e:c6:b9:6b:ee:44:e6:7f:
f8:73:8c:46:53:7a:a6:61:03:74:9a:94:19:2d:0d:
bd:4d:5c:fe:80:13:8f:5f:5e:fb:42:21:9e:24:de:
75:29:a5:78:1f:1d:3f:ff:b0:2e:8c:9e:88:ac:96:
8c:17:53:58:d9:b1:1f:b6:db:2a:a1:52:e4:ff:08:
2c:bf:dd:27:12:a3:3d:e1:1b:c4:e2:bd:1c:cd:12:
09:7d:f7:97:8a:68:79:02:0c:4f:e2:09:60:7f:fa:
67:07:d5:19:35:09:0e:c6:82:ca:78:31:08:e1:f4:
c1:4a:aa:77:e1:50:f6:3a:9f:0d:87:b2:3d:ef:45:
76:05:2a:4b:f7:92:e8:35:ad:c5:59:96:2b:61:4c:
aa:0f:06:db:76:d0:fa:a0:25:3e:7d:34:ce:f0:ba:
80:2d:62:5c:63:e3:98:54:af:b7:93:34:8c:a7:1e:
df:ec:d6:d2:8e:ed:b7:75:de:27:ee:4b:4e:f7:ad:
69:6b:47:6c:99:a6:94:a6:4a:46:7f:81:71:0f:86:
18:be:e1:6e:63:f3:54:26:3f:82:7d:53:04:47:66:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:84:6C:08:68:D5:34:35:45:A7:10:8C:ED:0C:52:74:3F:24:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:208c:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:d4:d9:f5:da:57:98:5b:e8:1e:7f:58:ca:79:45:08:df:fa:
09:91:41:6a:d4:8e:f9:b4:2b:fd:df:77:db:31:af:91:d0:9a:
2b:0f:c0:64:17:7a:2d:43:e4:bf:19:95:f8:30:ea:f3:c6:02:
ea:91:72:d5:53:29:cc:34:73:40:bc:e0:6e:ec:b6:2d:43:a6:
7e:12:66:53:72:2e:ed:77:42:2e:03:d9:b1:36:78:f2:bb:4a:
be:73:5c:25:6c:2f:e1:3b:b6:78:ff:74:37:21:05:6c:76:d5:
aa:0e:d5:c7:c4:a3:f1:f6:e7:1c:96:95:c0:b1:20:a1:33:78:
de:6c:d4:ce:54:1d:46:e2:f1:54:dd:05:d9:01:fb:bd:0b:97:
69:99:29:8f:b0:97:b4:be:a1:78:b9:d5:29:03:5c:43:29:67:
81:3d:c1:cc:6d:b4:1c:46:d6:0f:4c:e4:32:ca:59:90:de:41:
ea:77:75:30:27:ae:58:6c:17:2a:57:5f:c6:1a:17:ec:32:be:
cf:6d:d2:a8:05:45:81:a1:f2:36:0e:51:59:53:06:45:c9:13:
f5:d6:bc:3d:2f:7f:32:78:c2:c5:cc:ec:51:e7:07:75:77:8b:
77:7d:a3:05:f6:a0:99:88:f0:25:58:7d:f0:7b:4a:b5:b2:22:
be:1d:38:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:20:49 2026 by rpki-client