
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a0ebd0-b57f-372c-a17f-02993ea5d27c.roa
File: 38a0ebd0-b57f-372c-a17f-02993ea5d27c.roa (raw, json)
Hash identifier: UdvDdqiPE78DbXIQ4easJZtVFuXt1u9xCb9rn5A+SwE=
Subject key identifier: 9F:91:D2:B3:02:28:30:69:8B:AB:0C:10:81:FC:A5:95:79:C9:9D:0C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B3D890A6BBDD5154161C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a0ebd0-b57f-372c-a17f-02993ea5d27c.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 2603:301d:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:3d:89:0a:6b:bd:d5:15:41:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c5433a48-7d21-4b9e-b2b1-e6e3f9d2f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:b5:40:8e:89:e7:81:96:a1:12:de:2f:2b:
dc:72:2f:bb:47:05:f3:72:31:94:7c:3f:cc:15:54:
a6:4f:ae:fc:79:63:f3:ea:10:6f:b5:72:a8:c0:da:
8d:2b:04:c9:ef:aa:af:7c:47:b9:1e:20:ae:80:ab:
30:0c:e0:1b:ed:6c:fd:84:59:35:51:29:a4:a4:0c:
e5:05:a9:fe:17:e7:fe:cb:5f:0f:bb:61:87:ba:ba:
34:88:f2:bf:ad:74:d7:ce:90:8e:87:87:4d:30:cb:
e1:6b:24:1e:72:a6:03:e8:00:94:6b:56:23:b9:69:
8c:64:e7:a1:53:51:b4:18:98:57:70:e9:8a:40:ad:
9d:bc:07:7c:36:72:46:ec:e3:90:71:c1:d8:00:26:
c7:6f:84:d2:d9:8e:d3:67:3c:19:94:b2:5d:e9:7c:
64:d8:b0:52:2e:f0:9c:42:35:8f:85:65:02:27:67:
6f:33:c5:1b:05:36:04:37:a4:99:3f:5b:f8:5d:9c:
90:95:f8:ff:bb:52:f1:70:d5:a4:54:e8:8a:56:96:
06:53:db:11:e8:bc:cd:44:83:e2:c2:ef:56:34:97:
8b:a1:66:b0:6f:dc:18:7b:f0:10:a2:ce:66:17:73:
ab:db:08:ca:11:1b:40:a0:f7:ea:ae:31:b1:f3:9e:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:D2:B3:02:28:30:69:8B:AB:0C:10:81:FC:A5:95:79:C9:9D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a0ebd0-b57f-372c-a17f-02993ea5d27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:36:e7:a9:0b:c7:fd:23:e2:fd:cf:10:bd:35:f6:3d:07:0a:
40:e2:6d:3a:46:03:19:df:14:5b:ea:a3:dc:49:03:19:40:2b:
41:e0:e4:a9:2c:31:24:91:14:4f:fb:c1:78:e4:34:04:36:b4:
62:7c:75:f0:71:09:98:17:2e:1e:c6:71:cb:b7:df:d0:8d:15:
7b:fd:2c:54:c9:92:ba:9e:ec:34:97:15:fe:84:2b:2f:6a:51:
19:64:3c:82:73:bf:e2:d1:1d:0a:50:f4:4e:bf:dc:62:7d:60:
eb:ce:af:f5:b5:e1:97:e0:c4:53:87:18:0f:20:f8:d9:82:c3:
d1:e8:f3:4a:39:20:7e:0e:a5:7c:d8:39:28:48:2f:c2:26:f8:
ef:77:c2:fd:4b:16:93:e5:3f:77:d2:aa:2b:c2:7d:db:ec:1d:
0e:9d:98:a1:e6:60:df:e8:03:22:0b:0b:53:71:79:af:01:2b:
c8:bb:0a:0d:a6:0d:83:59:68:4a:3e:09:1a:52:30:9f:7f:35:
b5:b9:ef:5f:45:a9:ce:63:1c:00:72:c8:8d:ae:28:94:43:17:
98:48:cb:e1:9f:42:a6:f2:d5:43:5d:75:c1:10:0f:01:70:1c:
4d:86:7f:23:55:56:7e:de:7c:fb:fc:eb:a2:d7:b4:f9:1f:c2:
dc:2b:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:22 2026 by rpki-client