
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b412f7c2-50dd-3499-af47-9ae3eecad910.roa
File: b412f7c2-50dd-3499-af47-9ae3eecad910.roa (raw, json)
Hash identifier: QZg1g9ixlAmTbSJglgzEcNW5vGnSxVlfNz2kenOmcJo=
Subject key identifier: 72:52:9E:0C:DD:56:05:B1:3C:27:F7:A5:B6:83:54:2A:A1:FB:73:4D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF77F78082F9EB31CFB5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b412f7c2-50dd-3499-af47-9ae3eecad910.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 2603:300f:1c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:7f:78:08:2f:9e:b3:1c:fb:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=4af1d305-fb73-4a5a-bb07-3f84d12647e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:00:ec:93:6b:1d:33:f0:c6:77:c0:a0:af:
46:ec:0e:e7:30:27:aa:ce:51:18:3e:08:46:e3:00:
6f:18:9a:82:f8:c2:43:0d:e2:94:b9:ea:8b:c3:88:
04:4a:60:43:c3:19:fa:c5:b1:bb:b3:01:78:df:89:
4a:05:8c:c7:ac:d8:48:fe:55:7c:8c:81:a4:53:f9:
93:32:92:df:95:95:7f:0d:47:b5:14:f4:2b:56:c5:
ea:aa:41:b2:a4:1c:5e:08:43:46:e1:68:6d:a6:21:
c3:a7:aa:0e:c6:31:63:2d:5b:da:0d:46:01:16:ac:
c5:7e:99:4d:b9:3a:61:e0:e6:e8:9b:2e:91:ea:3d:
00:1d:b7:68:70:3d:ad:18:38:e4:a2:4c:af:66:a1:
aa:75:11:f2:91:ba:d3:96:2f:73:5f:53:c0:c8:d0:
7d:e2:f5:29:33:56:ee:01:0c:c1:e8:31:a4:76:88:
a8:46:d3:57:31:c5:d2:1b:41:34:a3:b2:c5:a9:77:
e8:40:fd:11:b9:96:61:da:78:45:fa:29:d8:26:a0:
17:62:9a:94:c9:39:3f:ab:bf:ab:10:8c:60:32:cd:
41:64:a3:a0:55:d2:cb:06:06:8b:36:1c:4c:28:bb:
d3:cf:fa:0e:5d:8f:84:09:3b:35:9d:aa:c7:62:e6:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:52:9E:0C:DD:56:05:B1:3C:27:F7:A5:B6:83:54:2A:A1:FB:73:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b412f7c2-50dd-3499-af47-9ae3eecad910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300f:1c00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:96:54:c2:72:3d:80:bd:9f:40:e1:16:05:c0:ef:24:9a:d8:
4b:ec:06:89:43:c1:9e:58:66:c6:93:7a:57:3f:1f:9a:80:61:
ec:ce:c4:4f:6e:ef:6b:31:58:f0:2e:02:e1:b1:e1:88:ab:02:
36:7d:6f:0a:12:b1:cd:9b:bc:93:06:7a:32:f7:8a:7a:e1:c2:
de:a6:77:b6:5f:14:cf:d3:11:7e:eb:0e:7b:21:bc:20:a0:bc:
8f:17:b0:4c:02:00:a1:8e:7c:75:02:44:0b:29:a5:88:e2:2f:
ce:3e:83:fb:aa:1b:ff:50:42:2a:d1:a4:64:36:f2:49:f6:b4:
b5:88:0b:8a:7a:a2:51:a8:21:94:fb:40:34:48:32:cf:ac:2b:
4d:5c:c5:98:51:50:78:ba:05:ec:a0:ee:73:ac:36:cf:68:48:
64:5b:09:f6:fe:26:e1:c5:9c:6b:76:2c:ac:f0:fd:fe:fb:3e:
b4:b4:9c:e8:0f:12:cb:a2:c5:89:68:1f:8e:5a:8a:ce:c1:ab:
1c:68:1e:45:3b:79:a5:da:b5:5d:a9:34:20:00:e7:70:8f:1f:
bb:34:66:11:62:e0:ea:e6:f9:6b:e8:1a:d9:95:5b:33:c4:e4:
41:ec:0e:8d:b5:47:da:ac:fe:ee:30:30:a0:0f:ae:2b:47:b1:
30:35:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:58:17 2026 by rpki-client