
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af3ab6b-1bf8-348c-bc2d-2f00600ee466.roa
File: 3af3ab6b-1bf8-348c-bc2d-2f00600ee466.roa (raw, json)
Hash identifier: iGE4W8nOaKqhActA+UvxqtkFxxJs3o8yVkRQ4Mkk3UE=
Subject key identifier: 87:35:A6:64:FF:5B:FC:7D:5B:D8:E8:EE:0F:22:CF:24:27:19:5D:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE86598A908935E4CBDD2D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af3ab6b-1bf8-348c-bc2d-2f00600ee466.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 7015
IP address blocks: 2001:559:5d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:59:8a:90:89:35:e4:cb:dd:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=aa8c6de0-979d-49b4-a08c-e2247889206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:f0:cc:ba:a3:fd:3d:3d:79:90:af:22:05:
6a:90:35:6e:88:60:9f:01:be:03:08:ac:9a:d2:bb:
ab:34:d9:d0:40:17:70:91:52:3e:65:d8:65:17:77:
d8:f3:d8:0d:b1:1c:da:72:db:00:00:50:49:9e:46:
4d:d9:d6:0e:9f:f8:d9:e0:0e:fd:40:c6:cc:20:27:
0a:6a:b2:02:0e:48:fb:29:3e:35:5e:ce:db:ad:b6:
6d:76:f8:02:05:c0:33:5f:a7:b1:56:de:31:e2:22:
26:80:91:78:90:a5:36:53:a8:9f:7d:fe:c6:a8:04:
91:32:3b:b1:ea:76:b2:f3:81:20:b8:74:6c:95:3b:
6f:32:69:9c:e4:5b:8a:c6:f8:be:80:68:ab:fe:f6:
55:a4:2a:e2:64:cc:dd:71:55:1d:b1:28:a0:c1:0c:
59:34:04:08:a3:d8:ac:e5:03:df:cc:c2:c3:25:d6:
59:3d:8a:22:83:08:f5:57:1a:e3:57:60:94:0f:9d:
dc:46:6f:a9:d6:3a:30:1d:61:70:1e:c5:30:0e:4a:
95:35:54:ac:dc:e8:63:38:6b:be:7b:e7:6c:2f:cd:
29:af:7b:67:77:52:9e:7a:fc:87:86:85:e7:76:97:
89:10:98:88:dc:4a:40:3b:be:92:f6:e2:ef:be:af:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:A6:64:FF:5B:FC:7D:5B:D8:E8:EE:0F:22:CF:24:27:19:5D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af3ab6b-1bf8-348c-bc2d-2f00600ee466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:5d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:e8:89:47:a0:20:88:e0:59:c9:f5:85:ff:c4:30:7e:be:a1:
7e:db:a2:c1:fe:dc:ef:44:e9:29:a5:54:27:76:a6:b2:ae:de:
f2:fd:73:88:73:a2:9a:9c:fd:cc:91:cd:c8:94:a6:a5:36:d5:
64:be:83:7b:aa:1a:58:4b:8a:34:9c:24:69:0f:a2:65:9c:3f:
a5:95:41:7b:e0:78:b9:63:8b:bf:72:08:e8:4b:0b:1f:9a:2b:
fc:8b:02:20:c5:45:54:e1:ab:63:01:c5:c2:ab:67:6b:71:67:
89:15:91:a4:64:04:1e:60:4e:d1:9c:a8:97:c2:d7:8c:cd:c9:
29:e1:30:e2:02:d6:86:90:98:d0:f4:95:d5:e3:50:5a:8c:37:
c9:5a:a1:33:ca:89:f2:17:f9:67:bb:72:3a:8b:d9:74:00:88:
52:3c:4e:dd:d5:b9:49:12:08:26:ae:16:2e:d6:fc:37:62:5b:
d7:4b:71:af:e0:4f:3a:93:08:2d:a8:05:59:49:c4:2b:b5:01:
1d:b2:37:37:8e:cc:eb:82:63:36:24:47:4d:d0:39:39:5c:3e:
db:e1:5a:5c:28:0f:17:0c:ef:6d:65:64:b9:49:26:aa:29:8e:
52:49:3b:63:c2:73:62:36:ef:91:89:bc:ec:97:c2:19:72:32:
01:8f:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:21 2026 by rpki-client