
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
File: 35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa (raw, json)
Hash identifier: JF4lLj5ynAR6DaDZnBdk3mhT9u2/ASE9Cup9A+F10EQ=
Subject key identifier: 23:51:CB:5B:95:F5:93:C6:D9:9C:50:0C:8F:FB:7E:2B:B0:EB:76:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78E9435FF094F80AD2D5A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33657
IP address blocks: 2001:559:a003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8e:94:35:ff:09:4f:80:ad:2d:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5a20e3f9-5a41-46ef-b243-13d971fe12d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:94:44:e5:bd:3a:b3:d1:e5:62:d2:29:42:
fe:b9:4e:ee:e1:47:f3:de:84:00:af:0b:ed:93:e3:
75:8f:ad:d1:2c:52:ef:06:6d:35:e4:da:4d:5b:07:
ce:9e:74:72:bb:c5:60:2c:bc:72:ea:b6:e8:a9:2f:
b3:b9:72:64:4e:86:54:ae:21:38:06:0a:cb:12:01:
56:22:09:1d:e9:ce:8c:32:ca:0c:95:a7:fb:eb:67:
9a:91:39:e2:73:ce:d4:43:59:15:58:00:8d:b6:7f:
4c:0d:26:99:b3:09:ed:33:27:a7:c8:0e:92:d1:92:
3e:1f:e7:42:de:f3:32:bf:f3:92:21:4d:d1:60:5e:
02:f7:0d:5c:0a:de:72:22:6c:91:25:bd:8f:48:54:
45:82:90:80:27:b4:0b:01:eb:1d:3f:d6:52:49:03:
75:50:f4:4c:c9:b3:bc:49:aa:3e:3e:93:8e:5c:b2:
9d:a5:74:ae:84:17:62:f6:e4:55:29:e0:0d:12:c5:
82:58:5e:34:e2:1f:cc:fc:16:42:ca:dd:9e:a9:27:
7c:6f:71:77:67:6c:8a:8d:3b:7e:76:2d:d0:5c:fe:
f9:95:dd:84:37:a8:96:55:96:44:5e:10:06:b0:8b:
67:0e:f0:a0:b6:f0:48:48:67:6a:a0:8e:a8:b8:0e:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:CB:5B:95:F5:93:C6:D9:9C:50:0C:8F:FB:7E:2B:B0:EB:76:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:a003::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e4:8e:92:5c:aa:e2:d8:bf:c1:ee:a9:05:c5:0d:c8:cc:b7:
71:ce:85:b3:71:5e:a2:5e:ae:43:bf:20:70:88:fc:c8:07:00:
dc:e6:10:b7:bf:c3:d7:21:a2:e5:7a:4b:56:ff:6f:8a:80:30:
05:3e:3e:16:40:f7:0a:74:21:0c:fb:f9:62:bb:35:9d:35:2f:
9f:c4:7f:7e:4c:10:4b:f4:f5:c5:70:52:7a:12:5d:ee:7e:39:
03:06:27:55:b6:f5:18:59:4b:96:64:d0:ed:2a:54:93:56:6e:
b2:04:88:d4:47:d9:44:cf:84:a7:23:00:1b:7b:a8:77:43:34:
b7:ce:02:6b:fb:81:8d:b2:c0:bf:29:53:59:77:31:27:9e:46:
a3:4b:22:5d:1d:c3:d2:e5:22:34:79:4b:08:0a:c6:ab:66:90:
93:15:45:3d:10:f4:b8:be:7f:3d:5b:9b:18:f5:bc:5b:33:62:
4b:6b:c7:d3:e4:d6:3a:52:79:cd:7e:26:89:78:f4:44:5a:fb:
74:0f:c5:32:dd:4f:d2:a5:fa:66:bd:eb:d2:f5:74:b5:68:aa:
fa:e9:f6:38:13:4c:f5:56:c0:15:a1:c2:f9:93:cc:29:c3:80:
fa:be:ff:5a:91:e8:ba:5d:cd:b4:c3:77:fa:50:79:fd:a0:d8:
15:a5:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:42:43 2026 by rpki-client