
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf97a48e-0579-3e99-9f31-bd016522306b.roa
File: cf97a48e-0579-3e99-9f31-bd016522306b.roa (raw, json)
Hash identifier: fBNmBMXU6QIcIpqorlavx5IRRyQUNfFyWnWjKVeN4z4=
Subject key identifier: E8:1C:F3:6D:1B:BB:2C:EE:F2:8A:7E:19:47:5B:AC:01:A8:30:17:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A628D750D8294EA70FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf97a48e-0579-3e99-9f31-bd016522306b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2001:559:7ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:62:8d:75:0d:82:94:ea:70:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=19c742ad-8cfe-417f-8ae1-86ec15800ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:a0:f4:4e:db:67:9b:2e:75:b4:eb:61:7a:
59:da:56:74:2d:37:fd:94:4d:f8:1c:80:79:e2:d4:
0e:9d:33:aa:0f:6d:87:e9:11:3f:0d:70:8b:81:a4:
12:94:dd:64:25:42:8e:04:b6:22:ab:1d:17:37:a4:
58:40:55:6b:6d:e3:30:29:98:68:e1:29:c6:6a:64:
a9:56:87:72:4a:0a:c1:92:8c:11:0f:7a:c1:df:f9:
5e:ee:e4:7f:1c:c9:b0:19:59:ea:45:23:eb:f3:a1:
02:50:93:20:24:6f:3f:c4:dd:39:81:0d:c6:17:81:
6d:df:aa:db:82:44:19:5f:54:86:6e:bc:30:2d:b9:
dc:fe:de:c2:21:13:85:ce:ed:61:51:77:73:75:59:
4d:de:b4:0a:2e:97:6c:75:12:c7:fe:7f:c0:e6:62:
e2:be:69:b4:77:72:f9:64:1b:67:ef:cf:fe:a3:c1:
6c:37:27:78:93:74:ee:c7:cc:53:0a:32:f9:e8:57:
9c:13:79:f9:7c:90:7e:28:c8:ba:fa:fd:41:86:e1:
e1:f0:42:2f:63:52:0a:4a:06:e0:f1:cb:da:e7:15:
08:2d:21:b4:19:e8:e6:7a:dc:1b:49:1e:a9:01:d5:
3e:5e:f8:b2:d2:23:12:0f:9e:1c:67:57:7c:9b:f9:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:F3:6D:1B:BB:2C:EE:F2:8A:7E:19:47:5B:AC:01:A8:30:17:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf97a48e-0579-3e99-9f31-bd016522306b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:7ab::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1f:fd:14:8b:8e:80:61:65:6b:41:cd:c0:4e:2f:2a:04:7e:
be:71:6f:dd:6c:10:35:20:8b:38:9b:8e:00:ad:5a:5c:68:f8:
97:65:28:c8:a5:26:f5:4d:92:f1:a0:5c:f3:91:03:5d:d5:ca:
16:46:de:f4:37:0c:4a:bb:c5:7d:29:e5:0f:c5:17:88:d4:15:
f0:01:fa:fd:09:36:a0:eb:33:ab:14:a6:eb:8f:07:93:43:e0:
0c:77:4f:9d:2d:1e:dc:4a:16:aa:a6:fa:b3:54:05:b8:31:18:
a3:54:36:ca:bd:c3:2f:0e:51:ad:e4:ef:32:ee:d0:c0:e6:0c:
21:7b:ff:b2:56:08:b0:67:38:8f:45:5a:57:4a:72:67:f8:88:
84:2d:57:f3:f2:89:7a:e8:a6:06:32:03:a9:e1:c9:fb:14:04:
5a:d4:e9:b4:38:bb:b3:5f:c8:67:f7:0a:ac:db:f9:58:81:db:
12:4f:a3:32:1c:c7:67:af:54:9f:a6:a0:43:9b:3b:1f:2b:6e:
a0:36:10:ab:fe:1b:80:d9:88:30:90:e4:aa:80:03:fd:c7:10:
3b:87:7c:32:41:d5:fe:44:3f:0a:8f:30:c0:f9:d6:e2:34:0d:
f0:d1:74:ca:d6:e0:e5:99:97:a0:e2:c5:8b:de:4f:41:2d:55:
42:fd:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:42 2026 by rpki-client