
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0142f96-2a7e-3c72-a101-a1057ca3b765.roa
File: a0142f96-2a7e-3c72-a101-a1057ca3b765.roa (raw, json)
Hash identifier: htoapj7YcWC/1/z5SzRRJv8hMSDi16C3xynC3lyA2wU=
Subject key identifier: 1A:06:AC:01:C4:76:0C:8C:2A:62:BB:FD:46:56:1E:2D:11:FC:3B:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E31CF5392EB4352F75F91D2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0142f96-2a7e-3c72-a101-a1057ca3b765.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 22258
IP address blocks: 2603:23c0:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:53:92:eb:43:52:f7:5f:91:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=aaa74ca5-03cf-473d-937e-bd23f37a403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:eb:05:34:af:bd:d5:fe:d3:67:62:ef:5c:
81:04:d6:ca:3e:99:60:a6:05:0b:07:3b:cf:d3:9e:
00:86:8f:af:2d:3c:ee:f1:b4:d0:31:f1:74:3a:b6:
63:2f:82:e6:5c:09:e4:89:f9:6a:65:d9:a5:9a:b8:
89:de:69:f9:23:e9:37:2e:f8:cf:07:59:8b:9a:58:
bd:c0:0a:f6:3e:8c:03:0f:f6:64:f5:fb:1c:78:d4:
d1:aa:86:aa:c9:15:de:cf:79:74:70:d9:94:15:41:
3f:fb:ae:92:20:89:d0:65:51:60:b3:11:bd:5d:99:
d0:f3:ad:ed:10:21:64:84:d9:0b:25:ac:28:21:36:
26:2d:9b:c8:e1:37:a6:26:e1:a0:94:10:9b:eb:49:
58:6e:a3:97:72:99:d0:aa:60:b0:9b:bf:7f:15:f0:
51:45:bd:49:3c:04:c4:5e:7b:48:c2:c6:b3:eb:f8:
3b:96:60:d0:0f:d1:dc:ff:18:a7:43:a4:ab:0c:27:
03:8b:b9:e0:5e:81:a7:c1:8c:b0:8a:4b:ae:f0:be:
1b:8e:76:de:d9:21:85:9a:1c:34:e7:5d:06:af:0c:
58:0c:8b:35:78:7b:11:6f:81:07:9c:28:c9:3d:4e:
01:d4:35:1f:44:8d:d0:c0:33:e9:bc:bd:b2:e9:36:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:AC:01:C4:76:0C:8C:2A:62:BB:FD:46:56:1E:2D:11:FC:3B:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0142f96-2a7e-3c72-a101-a1057ca3b765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:23c0:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:72:a9:2e:c0:00:50:6c:84:21:01:60:6e:70:18:9f:70:1c:
22:66:22:02:c2:95:56:5a:ad:7c:8d:53:b5:46:ab:ef:7a:66:
95:da:fc:21:e9:53:b2:5d:18:e8:96:98:ee:c6:64:95:0b:71:
c1:1d:7f:65:20:5d:ad:be:e7:58:95:43:f5:72:4a:9b:8b:7b:
af:e7:bf:d6:ad:a4:82:d8:9f:a9:20:3d:5b:03:de:3b:af:f4:
f4:74:7d:6d:17:0a:36:71:cb:7a:f1:1b:9e:76:72:8a:e0:4d:
e8:0a:9f:6b:61:99:a6:70:4f:c1:0f:45:07:47:da:06:17:8e:
79:46:94:cd:56:c4:6f:21:c6:07:fb:73:23:cc:a4:12:10:de:
a5:73:87:df:6c:46:2f:05:01:e0:54:c5:f2:c7:84:ab:0c:08:
b2:3f:53:70:49:94:ea:81:7a:ed:5f:57:40:17:f3:90:11:ce:
06:92:44:e6:9e:ef:d1:af:05:df:6a:19:7a:57:b9:3b:70:cf:
81:bd:dd:66:9e:4f:32:59:d5:29:32:70:17:8f:99:5b:75:4a:
cf:3d:d0:43:28:b0:f9:b0:b6:72:9c:93:eb:ee:6c:08:63:d7:
f9:f7:95:3a:64:a8:43:3d:56:53:7e:d7:36:bf:e0:17:42:33:
ad:5e:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:19:38 2026 by rpki-client