
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33b39c0d-c35a-3642-8ed6-c76d5d8115de.roa
File: 33b39c0d-c35a-3642-8ed6-c76d5d8115de.roa (raw, json)
Hash identifier: tLbRDaGooYqkTC0SQJBEnHwQiGfFFsfQsJr+tOa9GKY=
Subject key identifier: AD:2B:14:E2:F3:33:94:9D:CD:C6:2E:A0:C5:E0:02:53:42:34:BE:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57F5CC22975A51D5B52C30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33b39c0d-c35a-3642-8ed6-c76d5d8115de.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 2601:240:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:f5:cc:22:97:5a:51:d5:b5:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=d2f6532d-b797-4624-89c8-ae2c93b7ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:98:4d:79:a8:72:c1:3e:1d:ed:f2:ab:e4:
71:2a:39:29:9c:a6:27:59:82:e3:e4:98:f0:ab:d0:
29:1c:14:3d:4b:64:5c:fb:4e:78:e1:7e:cd:65:b9:
da:a7:0a:43:e8:97:8f:1e:df:70:07:ec:af:0e:a3:
8e:46:c1:d1:f7:cf:08:46:4c:93:c0:ab:c1:cd:40:
ff:1d:4c:e0:1b:53:99:c4:6a:8a:96:25:27:11:10:
fe:70:45:41:42:05:93:c6:a4:5d:13:c6:2a:c6:6c:
b3:37:19:89:e3:c4:39:50:80:64:f3:39:27:7e:79:
7c:13:b0:7d:3b:c8:38:ef:51:05:ea:04:70:c2:6e:
34:72:9d:3b:01:ce:c2:dd:f7:55:5d:bd:bd:40:fd:
13:7b:61:3c:84:6d:48:7c:43:de:ce:6a:ee:2f:17:
a8:e0:b7:28:56:23:c8:8a:c9:c5:df:9e:f5:56:6f:
4b:d7:4d:b5:68:69:55:97:64:a0:a5:2b:0b:b4:c2:
a2:64:78:d4:bc:56:f4:7c:bf:7a:fa:c2:04:c2:3a:
e6:e3:8e:0e:b6:1d:a3:24:80:8e:0a:90:cc:c3:b4:
62:84:5a:7b:8f:92:04:f6:5a:e0:e9:1e:30:f3:cc:
39:74:66:96:9d:c0:6a:e7:7f:43:35:1f:a0:58:d9:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2B:14:E2:F3:33:94:9D:CD:C6:2E:A0:C5:E0:02:53:42:34:BE:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33b39c0d-c35a-3642-8ed6-c76d5d8115de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:240:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:63:48:f8:97:e2:78:7d:1a:64:2f:41:b0:d7:b9:d1:d0:e2:
50:59:65:75:6e:01:51:0c:17:38:a6:68:2f:ee:05:b8:e6:8f:
5b:b4:9f:c3:01:e9:45:9e:69:7d:23:61:bf:62:c1:80:da:bf:
a4:b0:8a:64:da:11:b3:92:4d:23:85:bb:5b:cb:cd:bf:c8:54:
1c:02:97:79:59:e4:b5:e1:e2:c2:bf:7f:ac:21:cb:f5:c8:86:
52:2e:ec:49:f1:14:6e:d7:64:01:b3:f1:87:28:ff:c8:97:84:
87:bc:b4:fa:28:59:83:bd:b7:43:79:dc:64:2c:3d:78:3c:9b:
47:be:0d:83:79:a4:2a:ae:4f:d2:06:9d:d9:b6:0c:2a:41:2f:
a4:fa:f2:1f:09:60:b1:63:d1:b3:dc:4b:0c:e6:f5:73:36:1f:
23:19:96:8a:9a:aa:66:24:23:3a:d9:c5:c6:de:3f:cd:6a:cb:
d9:29:12:2a:8a:ff:20:1b:39:e5:fd:c0:86:14:ec:6d:ac:d4:
5d:d9:94:8a:26:81:5e:7e:3c:d5:23:1b:cc:f2:b4:d9:4e:19:
8e:87:ae:5d:34:c1:73:3f:e0:a1:52:a5:99:43:3e:c2:8d:6a:
19:0e:52:93:06:46:20:8f:91:9c:89:d5:c9:95:49:3e:95:5e:
e5:3c:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:43 2026 by rpki-client