
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885441f9-6f2d-32a3-af13-f5a989739c45.roa
File: 885441f9-6f2d-32a3-af13-f5a989739c45.roa (raw, json)
Hash identifier: PmZgR3lLNnAvSK/np4XZVU8goDfuYXEwKSTPM3FIiBE=
Subject key identifier: D3:88:A6:DC:E0:0A:8A:77:8C:42:62:E9:30:A2:95:2F:C5:82:E5:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE87E5D4757F77B45B0D4380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885441f9-6f2d-32a3-af13-f5a989739c45.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33659
IP address blocks: 2001:559:8243::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:87:e5:d4:75:7f:77:b4:5b:0d:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=7b35e09b-453b-4cb8-85da-57ce1e946117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:77:62:45:a6:1e:99:11:6b:d4:9d:ec:cb:
23:2d:b2:26:0c:67:ec:ee:2e:06:93:53:96:56:1f:
ef:81:92:d7:37:40:47:8e:59:5d:8f:73:89:69:d4:
68:9d:78:5d:ab:09:96:af:f4:68:fa:37:04:3f:6a:
ea:c2:16:47:43:0a:ea:31:70:61:22:1a:74:01:ff:
02:d1:12:34:e7:fd:58:82:2d:58:09:59:25:ac:ce:
67:67:62:06:23:67:fd:17:b4:fb:27:ce:af:9d:4b:
db:ce:24:28:9a:eb:8c:a8:ef:9d:7c:57:df:02:1f:
0b:65:25:94:8b:eb:fe:17:6d:de:8e:6d:c6:69:56:
23:bd:8b:67:fb:56:ef:f1:b3:e7:4f:9c:db:f7:e7:
0a:cf:0d:77:d5:f4:90:e0:6f:0a:47:5f:71:1a:4d:
a4:86:13:35:85:62:0f:72:5c:c6:3f:eb:32:a5:f0:
5a:5b:d5:01:0f:33:fd:07:17:99:8d:2d:24:33:e0:
b7:91:a7:92:00:ff:0c:5d:62:7e:f7:58:6e:55:a6:
3f:7b:68:d9:d7:b4:eb:b3:3c:1c:7f:a7:70:f8:de:
1b:ba:23:d6:77:9f:97:32:e1:bb:4a:ec:b5:d5:13:
f7:da:69:bc:27:16:61:66:6a:26:c1:b1:8b:d6:29:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:A6:DC:E0:0A:8A:77:8C:42:62:E9:30:A2:95:2F:C5:82:E5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885441f9-6f2d-32a3-af13-f5a989739c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8243::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ab:53:9e:c4:b2:8f:a4:9c:d4:f0:65:7b:b0:d0:7c:24:ae:
ef:b4:84:51:1e:71:01:2b:6c:83:c8:4c:37:82:67:f1:7c:26:
45:2a:34:26:95:6e:38:db:cb:26:7b:db:e1:06:a0:f8:df:16:
b7:0b:06:22:8a:18:0c:31:f5:ad:a2:db:55:51:3f:43:46:f9:
32:3e:6e:e7:7d:fd:d5:05:ab:6d:e7:c6:0d:cb:0b:29:ab:98:
f9:a5:de:1a:a9:4b:36:2f:41:42:a0:dc:8d:81:1c:95:4f:89:
90:32:c6:bf:40:a5:a7:06:f9:e7:64:65:da:b6:83:8a:84:f0:
3e:c7:e6:35:29:6a:07:4c:cc:f8:00:37:26:bb:46:dc:3b:c2:
86:c1:84:47:c7:c7:52:68:ff:85:cc:48:a1:db:a3:46:91:39:
00:5c:e0:4e:d2:84:ea:0a:6c:4d:b7:e4:04:d8:81:6a:ca:f1:
11:44:df:7d:63:21:f7:ad:ea:f7:71:78:b1:f6:a4:91:9c:9c:
6d:00:a0:b4:30:bb:1b:46:37:0f:53:54:44:40:a2:8a:08:fa:
d3:c4:be:fb:f4:7b:11:88:bd:47:ef:ab:54:be:f8:2d:81:14:
2e:c2:67:74:e6:bc:49:42:af:2d:55:df:3e:e2:58:95:79:a5:
ee:d4:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:15:54 2026 by rpki-client