
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
File: 35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa (raw, json)
Hash identifier: LX0EzI2xKa7qP0F3SWseYiyssnGm8A8aEf+eW82cZv0=
Subject key identifier: 46:08:5D:97:0D:96:A4:53:BA:7B:1C:9A:BF:78:2A:AD:3D:37:AE:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDEA7E18B9A7A49C84977600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33657
IP address blocks: 2001:559:a003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:7e:18:b9:a7:a4:9c:84:97:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=ce35d741-f397-4d5e-8eb4-2276b727e694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:60:18:50:13:63:01:86:09:2b:99:af:98:6d:
01:cf:2c:fd:65:8e:2a:b5:c5:80:5f:38:fa:6f:9b:
d6:e4:64:75:8b:7c:a0:82:69:c4:a1:df:e6:c4:f8:
53:9b:db:a5:17:9a:a9:d9:96:df:2a:8d:6a:0e:2c:
b9:86:84:6b:6c:d8:6c:f8:c8:96:84:ec:47:b6:8c:
8a:27:a5:1b:62:93:30:a7:06:aa:79:c4:63:b6:6a:
31:8e:6e:bd:86:9e:7f:f8:01:e0:c7:90:f0:1b:16:
bb:05:bc:22:b9:73:c7:0e:d7:fb:22:08:3d:95:da:
16:22:46:8a:d1:7c:4a:0a:bb:a8:a9:1b:6d:17:3f:
cf:8b:55:8d:fe:31:2d:ea:68:bc:c1:d4:19:d5:4e:
3c:1f:41:e6:67:fb:2b:8a:db:58:c9:5b:5d:9f:60:
28:c9:a0:4d:92:bf:12:64:9b:7a:2c:4a:93:87:a4:
df:93:c0:2b:52:06:12:db:63:cd:d0:f2:cb:0b:ea:
d8:21:cd:cd:0a:01:52:2f:e3:dc:1a:13:41:28:d8:
0d:8a:62:b4:84:2e:96:03:14:17:ab:8f:c6:ad:2c:
06:30:dd:23:b6:36:dc:d3:04:51:24:30:fb:39:09:
d2:ac:6c:1b:0c:4e:16:9d:89:ba:d4:c2:a1:31:21:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:5D:97:0D:96:A4:53:BA:7B:1C:9A:BF:78:2A:AD:3D:37:AE:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:a003::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6b:e7:7c:a8:28:f8:7a:9c:61:37:75:c4:e7:68:c1:6f:5a:
34:c9:ab:38:5c:44:4f:75:41:4f:1b:7b:98:39:f3:45:03:6c:
1d:fe:ad:a3:95:d9:89:7d:cf:27:37:58:1a:53:16:eb:e3:43:
58:46:3a:ed:99:52:ab:be:83:53:9a:12:00:10:ca:81:8c:50:
e7:5a:3d:b4:5f:3e:70:e4:09:9f:88:aa:34:af:3a:29:c2:4d:
66:60:61:a6:ec:6d:3f:0c:7b:d8:5b:c0:20:69:c1:69:a3:ca:
b6:5c:47:8e:64:aa:cc:b0:1e:25:d6:46:e1:17:f2:f8:19:da:
3f:2d:e2:1b:21:be:8a:44:36:fd:ab:82:5e:5c:65:b0:93:ff:
39:3f:9b:41:88:bd:cb:ba:2d:b8:de:85:c0:a3:1e:5b:ad:0f:
98:6f:78:d3:e9:ef:6a:c0:c6:ba:67:bb:0a:44:be:b6:fa:dd:
b2:18:88:cf:7c:81:71:21:eb:38:fe:91:57:dc:a2:19:80:8c:
8d:5d:61:a3:98:6c:cc:e3:96:a3:6d:c1:5f:35:83:fb:d2:bd:
d2:22:db:ec:70:ca:98:3d:e1:50:94:16:8e:0f:01:8c:ea:01:
a9:4d:cb:ab:09:7d:a4:47:44:51:e8:60:60:02:ec:aa:f1:86:
62:2c:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:10 2026 by rpki-client