
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa
File: 21be77e9-3d53-3e4a-81bb-552a880947c7.roa (raw, json)
Hash identifier: ZDSnItERpnxR351eaDzvzffOwdz7i+JXV2J0swyJs0E=
Subject key identifier: D3:16:23:CA:4E:0B:85:9E:B8:08:FA:BA:06:9E:65:1D:F1:10:85:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8F6B6DFA6DAD8C28D1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33657
IP address blocks: 2001:559:2ca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:f6:b6:df:a6:da:d8:c2:8d:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=6a7ea7b7-ef60-472d-9d5f-da666a580b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:f2:e1:87:6c:f8:f6:fe:2c:07:98:70:bf:
4b:d4:aa:94:80:32:cb:2e:46:7a:82:ce:64:33:6b:
af:e3:7e:bf:88:5d:15:b5:06:35:84:ae:ae:2e:e6:
fd:58:2a:7e:e4:47:82:03:cf:26:48:3e:e7:43:c0:
6f:21:9e:7c:90:90:2e:91:95:f5:7a:6b:de:b2:b6:
85:5f:94:81:22:96:22:2d:b9:07:a7:6e:fb:50:77:
e5:5b:e5:42:60:39:9a:ba:33:11:c2:d7:95:86:a9:
92:ac:c0:26:11:a8:36:80:4b:13:ba:16:db:f2:33:
b9:ea:ea:7a:3f:de:f3:dc:bc:09:de:a9:a5:36:14:
41:5b:26:c3:df:38:a4:7a:e6:13:e2:40:89:19:99:
43:fc:16:bf:f2:cb:97:da:3c:21:4b:78:60:7f:bc:
e7:01:db:94:22:58:25:11:1e:f7:ff:1c:e5:45:e7:
0d:71:52:a8:10:02:79:d7:7b:1e:c8:26:c8:fc:51:
a1:b6:8e:bc:73:45:f4:00:c4:4a:5b:82:e6:4a:bb:
ce:70:e9:f9:1e:f8:a0:11:3b:37:a0:76:b9:28:f7:
17:22:51:f7:93:05:f1:c9:15:52:de:9a:4f:f0:53:
e2:be:ee:4f:1b:35:eb:e3:b6:bf:75:9e:79:b4:a7:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:23:CA:4E:0B:85:9E:B8:08:FA:BA:06:9E:65:1D:F1:10:85:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:2ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:1f:df:8d:73:33:4f:5f:43:38:50:2d:0e:25:59:fe:61:08:
5d:4a:e8:39:90:c8:e8:e0:ab:ba:89:de:40:2b:7f:58:b3:b8:
d6:87:75:85:b4:00:37:b0:3c:de:f5:75:16:3f:ae:04:3d:25:
a7:83:ef:ef:95:f7:f2:af:68:b7:2d:c0:92:5e:78:ee:ab:87:
18:4e:e5:0b:fb:9a:fe:ac:42:29:1b:94:21:41:18:6a:0c:8b:
95:f9:bd:e0:df:b8:93:cf:37:84:97:ad:1c:94:c6:7d:a3:f2:
6d:9a:76:22:94:5c:89:24:5d:57:32:0b:68:aa:06:9f:18:6a:
a0:08:f5:2b:9e:1f:0d:e0:aa:8e:ae:05:35:9d:1d:ef:9b:77:
0e:3b:6c:e6:1b:de:0c:97:2c:1f:77:dc:db:7d:43:1a:e0:30:
33:aa:1b:a0:ec:f3:76:e8:77:97:c9:4e:3e:ec:97:ba:b7:3a:
98:1b:28:19:b1:c5:eb:b3:df:60:68:bc:f9:64:3f:1e:e9:11:
c7:40:a4:26:78:72:bc:f2:ca:5e:a1:9d:01:80:aa:7b:fd:d7:
c3:d1:5b:37:c9:e3:1b:88:07:ff:72:ee:37:5c:6f:e8:d4:b3:
c5:5d:47:90:03:57:60:17:ef:88:57:70:ab:7c:41:b7:37:11:
9a:56:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:42:36 2026 by rpki-client