
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2959786d-cdfb-3bb7-8791-0d4a480bf492.roa
File: 2959786d-cdfb-3bb7-8791-0d4a480bf492.roa (raw, json)
Hash identifier: 9OdNnhN2XPn5igx8WV2UtMc8gvd6+6UeVAjhnJmtxb4=
Subject key identifier: 5D:65:90:50:A7:90:20:1A:E0:A0:3B:69:04:CF:78:A1:76:53:52:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49827EAC358756D31029AA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2959786d-cdfb-3bb7-8791-0d4a480bf492.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33657
IP address blocks: 2001:559:82c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:7e:ac:35:87:56:d3:10:29:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8e22bf93-b4d5-418e-8268-44e19df37af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:17:3c:2a:5a:96:1d:db:b1:17:c2:d4:7e:
42:9f:1e:a7:c0:25:80:e5:e3:d5:75:ac:17:dd:65:
03:93:26:5d:01:a7:aa:61:39:4b:10:8e:d3:ab:0b:
a7:3e:9b:cf:70:90:4f:1d:2e:0d:52:30:04:10:db:
d2:42:5a:75:d2:52:66:6e:30:4a:8d:92:76:09:63:
74:fd:38:cf:08:01:f7:aa:7a:88:89:19:70:e3:c6:
92:cd:e0:f0:10:1d:b3:ef:05:c3:d5:26:e7:eb:fe:
fd:73:3c:e0:d3:68:14:1e:47:5c:57:c6:60:a8:c0:
da:d8:c4:64:22:3f:0f:42:0d:9e:c6:33:27:77:15:
8e:ad:53:48:cb:dc:2d:b1:7e:cf:81:c6:5a:38:52:
1f:d9:5d:1a:df:c4:93:39:ea:3b:05:8f:f8:01:c7:
9c:38:63:48:90:32:e1:5f:7e:db:1c:9c:f1:0e:9c:
d4:42:4a:90:ae:e3:2f:a3:44:27:6e:9a:ce:92:c6:
ba:4e:95:d7:60:54:d1:04:99:6a:55:e9:b7:20:eb:
c6:3d:cd:d0:4d:42:37:50:b4:ad:db:02:bb:c8:7a:
f0:67:7a:f7:04:e0:9d:55:ba:cb:da:e9:d2:ef:a6:
0f:3f:3d:b5:ec:6d:71:f6:f1:64:37:52:4f:9d:02:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:90:50:A7:90:20:1A:E0:A0:3B:69:04:CF:78:A1:76:53:52:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2959786d-cdfb-3bb7-8791-0d4a480bf492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:82c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:f5:6a:e4:3d:b6:40:76:da:f1:53:f2:74:f4:55:4c:aa:fc:
62:75:de:52:bd:76:95:1a:9b:9e:b5:5e:c5:0d:9d:86:df:4d:
d4:2f:d1:6f:a6:ed:e8:6a:27:16:67:96:98:15:62:c7:31:ab:
11:e9:83:bf:ab:50:9a:31:f5:55:67:9a:15:02:f7:52:97:d1:
fc:16:cb:40:1a:3c:5f:ce:96:66:d2:a9:bb:d6:bf:39:dd:d8:
1b:32:0a:9e:e1:06:7b:ab:dc:9f:18:a5:76:8c:66:b7:42:4c:
99:e2:11:10:e2:de:a2:60:a5:c9:6a:d4:81:1d:44:08:59:5f:
25:d8:5b:d9:56:0b:87:d4:a2:30:79:86:a8:ac:3c:c5:94:0c:
f5:3a:ac:d9:52:2f:d9:ad:5b:a0:78:f2:6a:30:50:84:3a:70:
54:3b:a0:e8:44:7e:01:20:bc:79:ed:39:76:4b:41:15:86:6f:
1d:e8:89:81:83:e0:3d:83:00:54:f7:07:2e:29:bd:0d:f9:c7:
9d:4f:9b:82:81:7a:ee:4f:5d:53:26:f6:53:32:61:9c:56:4b:
46:1b:19:24:26:ce:67:3e:e7:fc:94:b2:b1:b5:f0:18:30:a1:
76:c2:4a:d0:81:db:33:a0:b7:25:5e:38:91:53:e6:1a:90:12:
b8:4d:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:52:51 2026 by rpki-client