
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa
File: 2a8563be-7036-367d-9a4c-5a740baca40f.roa (raw, json)
Hash identifier: qjZcYc+bA/m3iFa6U7L4Uf7ibNtY4E2HjOA/lUNpaOg=
Subject key identifier: 73:34:8E:69:80:05:35:4B:0F:37:E2:91:18:5B:FD:9E:82:C2:06:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57AD804B1218F9AF26BD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 2603:301b:2f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:ad:80:4b:12:18:f9:af:26:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=44f36094-22f4-4933-a692-5f3d11d9f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:5d:40:f5:d3:ac:9c:ee:2a:98:90:80:23:
38:75:18:71:09:37:ad:92:b8:82:07:0c:6c:40:cb:
7a:b4:d3:56:96:53:e5:5b:76:fd:a8:2e:c3:7b:ea:
9d:5c:01:58:77:3f:ae:6b:f4:d0:d5:39:2a:be:a4:
d4:1c:2c:f7:c5:85:71:39:01:cb:11:34:79:9e:4c:
b5:04:4e:0f:ac:0a:9b:98:55:ee:17:ce:eb:4e:e4:
36:00:3e:86:e7:f1:f9:12:e9:2d:da:8a:72:cf:2d:
f0:b3:83:50:ab:e3:4a:0d:20:2d:96:3d:6e:63:23:
c4:9a:69:1c:da:fb:ae:fe:d7:79:c2:f1:48:58:c4:
5a:85:5b:0c:6b:f3:81:4c:2a:e4:be:99:f1:8f:46:
d0:1d:68:59:35:a1:db:f5:f3:b5:d0:a6:61:57:e8:
f8:72:77:d4:12:55:3a:94:2c:03:d2:df:ec:c7:6f:
79:e0:d3:01:03:22:3c:6d:da:dc:5c:d5:06:df:c5:
0e:b2:28:f9:f0:d4:ed:61:b4:12:06:5f:98:68:da:
ee:15:77:48:b7:df:c3:1e:ef:96:5c:c2:a0:5c:ce:
5b:2f:6b:8b:a1:25:49:cd:7b:d5:97:ca:03:e2:33:
7b:c0:04:2c:85:3f:5e:e8:45:43:f9:71:ba:41:e5:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:8E:69:80:05:35:4B:0F:37:E2:91:18:5B:FD:9E:82:C2:06:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301b:2f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b5:ec:50:bd:5c:31:79:d7:3b:92:6e:31:ad:9d:f2:22:2e:
39:18:80:70:a3:21:10:7b:0d:8e:a2:31:a3:25:8e:8a:36:aa:
08:7d:2c:fe:4e:2c:8d:29:8c:31:ff:77:ea:a5:cc:d7:a6:50:
f7:c3:fa:2c:9d:5c:34:c6:a9:b2:17:be:88:1c:35:80:cd:41:
d7:d6:36:a0:61:21:96:db:de:a0:b4:20:7f:c8:93:78:af:dd:
24:fb:52:fc:28:84:89:9d:e6:3b:1c:73:df:f2:c9:eb:be:f5:
12:d1:b5:04:46:12:d0:16:6d:68:b1:67:ff:12:ff:a8:96:dd:
e9:20:42:b1:e6:7a:26:67:7d:1f:42:a3:3c:69:a9:05:75:51:
60:16:53:e2:9c:0f:35:6d:93:a4:4a:83:f3:88:d6:e6:c8:87:
84:62:77:b4:f9:6e:b3:64:22:f7:06:84:c2:a1:06:a4:49:3c:
2a:34:01:6e:5b:0e:00:f0:f5:03:20:d8:be:3a:a6:5c:70:d1:
eb:cb:17:f5:d3:66:00:dd:63:c6:7f:78:83:35:fc:de:3e:fa:
2e:55:9f:00:6f:c8:a8:7c:41:4a:63:41:28:48:b7:3f:da:64:
59:cf:a3:81:73:ef:7d:e2:ea:72:56:7b:df:71:76:4f:0a:3a:
30:e0:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:13 2026 by rpki-client