
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa
File: e955d497-3567-35ca-af2a-62ffdc30b1c1.roa (raw, json)
Hash identifier: M2meVJUTM7OZvmkmQNBONQqgbFIThy6m5/ts0R+Nm7M=
Subject key identifier: 5C:03:D9:CE:4C:29:2D:5B:4C:C2:C6:7E:3A:52:6A:79:B8:44:D0:73
Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial: 010D0C9F4328584ECD372508C3EE59036ED33680
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 5050
IP address blocks: 2001:5e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:25:08:c3:ee:59:03:6e:d3:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=04aa9e74-8116-4508-b87d-4ded6c64b91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:d4:06:8e:93:08:db:f2:61:8f:10:37:ef:
e0:2f:71:fb:90:b4:99:e5:6e:4a:ca:da:76:43:73:
83:fc:86:df:8b:3f:f2:ac:1b:af:8c:78:18:90:1a:
9a:4b:7d:67:4c:e3:c8:d9:bb:14:7b:cc:fe:b8:17:
05:42:b3:14:d3:c7:6e:16:4a:c4:a8:49:64:82:e5:
0b:ba:39:cf:ac:2b:18:fd:f5:2e:ab:8c:48:65:cb:
ce:c0:0e:df:86:06:a3:13:75:99:cb:97:5e:e5:bc:
fc:af:3c:95:94:1c:3c:8b:fd:2f:73:9b:f0:6f:71:
2d:09:60:0a:7b:58:39:18:eb:ec:e0:3d:9f:7a:6b:
8a:9e:fb:ca:18:d4:3e:b8:8a:1b:73:9d:6f:dd:37:
b7:47:b7:f7:a8:dd:c7:20:8f:3a:78:33:78:db:8b:
1e:be:ae:a8:4e:ac:93:7b:65:2d:1d:17:fd:88:21:
3f:3c:50:e5:5c:ca:9d:36:a6:69:3d:33:0b:b2:de:
82:bb:c7:19:46:68:95:38:dd:49:8f:c3:47:8a:1c:
f0:3d:a6:14:f7:a6:5d:e7:84:93:6f:f1:27:e4:18:
db:f9:cc:61:bc:06:ad:75:03:bd:c4:9d:1a:c2:d3:
93:12:17:9d:6f:a1:69:46:61:06:67:a8:27:4d:71:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:D9:CE:4C:29:2D:5B:4C:C2:C6:7E:3A:52:6A:79:B8:44:D0:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
X509v3 Authority Key Identifier:
keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5e8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:76:7b:e2:1d:fd:de:e1:76:f5:c4:16:3a:f5:a7:8f:3c:d4:
fd:c2:4f:41:ed:0f:b5:24:a0:d3:11:35:c4:5d:f0:04:5b:8c:
d5:36:13:67:d3:ac:b3:90:8e:b0:9c:f3:ce:da:88:03:e0:71:
12:c0:75:58:2a:05:b6:9e:dc:72:28:7a:ed:d9:5f:4e:db:de:
ff:e1:af:98:44:88:ea:b4:89:76:ef:26:44:9d:ff:ff:b6:01:
d3:04:ea:3d:dd:15:38:d2:91:ec:c8:bf:28:4d:ce:93:8c:dd:
9f:f0:11:cc:60:55:f7:0b:b2:43:c8:91:47:df:30:ee:b8:67:
15:13:23:8e:01:92:0f:c2:52:00:99:3a:07:62:0e:2f:36:b6:
c4:40:6d:01:91:6e:8c:01:e0:29:ea:a6:22:26:99:3a:f3:c1:
93:8f:e1:e2:6b:b3:7b:31:5b:68:c8:52:b1:6c:79:f7:87:b4:
bf:04:a7:cd:07:3e:0e:85:5e:69:2a:6c:f5:5f:dc:15:a5:15:
ba:16:41:bd:da:e5:76:cb:0a:43:48:7b:27:97:8c:50:4f:95:
35:4e:9e:ea:53:03:60:53:cf:83:9a:bc:fe:f2:0b:8b:cb:28:
f7:a7:bd:22:a2:b6:c3:a9:2d:93:0f:43:1e:f3:7a:53:53:a4:
c9:3d:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:35:25 2026 by rpki-client