
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cab6ab8-dec8-3701-a84d-1ff567779b47.roa
File: 1cab6ab8-dec8-3701-a84d-1ff567779b47.roa (raw, json)
Hash identifier: e9QU390P6Zj70pZp/3/BvbIeb4mCUzIKtXfK3UzxMTg=
Subject key identifier: BF:33:AF:36:16:B9:01:15:2E:17:0A:25:58:C7:46:D5:D4:68:4A:AD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE9CEBA9E1C891D971B9400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cab6ab8-dec8-3701-a84d-1ff567779b47.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33651
IP address blocks: 2001:559:c37d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:ce:ba:9e:1c:89:1d:97:1b:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=7b4adfff-d415-4c11-9f98-c287da4fd4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:51:38:46:1c:99:9c:10:02:07:93:14:fc:
33:9d:52:ec:67:20:6e:f1:58:76:94:39:2c:48:02:
a1:00:8d:31:e6:c8:13:ff:16:4a:68:5a:2f:3a:eb:
55:21:87:e4:91:8b:cf:05:35:32:61:f7:b7:b5:5b:
96:e0:b0:20:0d:d6:c1:25:d7:95:a3:61:4d:54:5c:
ac:db:00:31:5c:a2:f8:f1:8d:c3:8b:58:20:18:31:
6d:10:5b:10:ca:be:b1:5d:50:ed:3b:67:4b:b2:71:
4e:0d:e7:11:82:c9:1c:dc:69:96:47:36:44:28:1e:
9b:fd:3f:c5:a9:3c:ea:7e:9e:bb:8e:b3:2d:74:7e:
74:46:81:46:59:8d:14:48:85:0b:1c:8b:73:90:33:
39:8e:5a:ac:b5:76:e7:4b:25:86:45:85:82:45:72:
61:2f:1d:01:4f:a4:31:b8:84:4a:86:11:ff:f6:0d:
d8:76:03:2b:d5:85:b4:9b:67:be:48:1f:34:b3:93:
05:9b:a8:48:ae:e8:5c:d4:c8:7f:40:b5:1a:cf:0e:
68:ca:5e:5a:e2:fc:81:59:8a:d1:43:f3:3b:a1:13:
6a:53:6c:dd:bd:0c:eb:f7:67:97:43:22:ba:10:74:
80:5a:37:ce:75:61:04:f8:6c:a6:f0:76:c2:f9:09:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:AF:36:16:B9:01:15:2E:17:0A:25:58:C7:46:D5:D4:68:4A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cab6ab8-dec8-3701-a84d-1ff567779b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c37d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:07:2c:82:72:96:db:ce:79:68:cc:e0:db:f3:70:30:90:05:
03:fb:5e:2c:be:39:48:5a:ed:f7:7b:fc:97:6c:e7:73:9e:f0:
cb:11:cf:8f:07:5e:f6:06:d1:b6:8d:2d:d8:64:a0:98:f7:fa:
59:62:0e:b9:78:48:0b:73:de:55:4b:c4:c6:05:55:54:09:ce:
5e:cc:5e:d5:b2:2f:00:93:da:65:3d:55:13:cd:e9:50:67:0e:
24:a1:25:c1:86:5b:f5:c6:18:b6:ce:cc:44:97:dd:cb:ee:16:
f9:a0:e3:43:92:6b:aa:e3:d5:93:f4:00:ba:6c:46:dd:33:91:
78:85:bf:33:6d:d1:14:a7:ac:50:1b:8b:fd:dd:d4:79:2b:f3:
6a:3d:77:54:f2:50:8f:d0:5b:0e:19:91:ed:03:2c:fe:f1:ab:
c8:07:ee:b3:c4:75:9b:fb:55:34:1d:9f:e9:67:9d:c0:48:db:
0f:22:6c:64:45:c9:a4:a2:7b:e1:da:3f:e0:cc:bb:ec:17:e1:
fe:07:c4:ee:be:d7:1e:6a:00:0c:3f:03:a6:3c:5a:c6:07:62:
53:55:3d:c8:1c:a3:20:dd:a1:24:ef:0b:58:1e:25:e3:75:dc:
c6:e4:2a:8e:79:5b:46:37:d6:d5:4f:00:5a:34:97:5e:29:16:
4d:10:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:46:03 2026 by rpki-client