
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c33f72e-2616-32b7-a5e8-2b6ee11d649a.roa
File: 3c33f72e-2616-32b7-a5e8-2b6ee11d649a.roa (raw, json)
Hash identifier: tfOxp4doM+uNodtTSaKVrSXAvpTK+tNpkkQOuAkeex4=
Subject key identifier: 29:46:71:07:CA:3F:BF:2A:9B:57:37:59:0C:CD:A5:D2:2C:EE:58:3E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A711E8C5FF155F94F6640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c33f72e-2616-32b7-a5e8-2b6ee11d649a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2001:559:c1d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:71:1e:8c:5f:f1:55:f9:4f:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6d8ec72c-898b-4260-9a7a-16071e02eecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:7c:fb:17:bc:f2:52:bb:e2:f5:85:49:01:
ed:06:ee:0b:bf:56:f1:8f:e0:7e:23:71:d2:b2:49:
d8:c8:72:8e:16:83:ad:3d:98:73:4f:57:fb:e3:90:
b1:ec:0e:bc:ec:a8:ff:22:6a:d6:08:f5:e0:3b:0b:
ab:cc:0f:69:2d:b5:d5:71:a6:c3:38:92:04:f9:e9:
b3:68:5f:f0:94:72:72:7a:2f:db:76:b1:40:ef:6a:
33:40:0e:38:8b:af:e9:ed:1d:74:37:32:07:66:9a:
5e:70:dd:59:df:56:a1:c3:29:9c:a9:b8:2d:9e:73:
31:be:c7:cd:40:33:62:4b:8d:9a:b8:7f:05:9e:02:
6b:29:fc:4c:3e:89:46:f5:66:75:32:d6:f4:4a:08:
b4:83:c7:7c:42:57:b7:b3:1d:2f:7b:bd:e6:ca:e0:
16:a1:79:76:74:70:86:03:85:47:7c:48:52:2d:b5:
b3:6c:40:8d:2a:b5:f6:2f:3d:7f:5c:e3:68:fc:c2:
02:7d:ff:30:ab:c1:f7:8b:bc:2b:9c:55:2d:1e:14:
ec:f2:bf:72:ec:97:b8:bf:81:39:23:ed:0f:ea:25:
70:2f:4f:5e:1d:d0:22:19:5f:62:d7:e9:b1:5a:5f:
9e:c2:13:c7:66:2c:03:c5:07:ff:e5:11:a5:52:9e:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:71:07:CA:3F:BF:2A:9B:57:37:59:0C:CD:A5:D2:2C:EE:58:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c33f72e-2616-32b7-a5e8-2b6ee11d649a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c1d4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:af:34:b1:b0:37:5a:3d:e9:6b:24:05:d2:c2:64:40:57:ae:
bf:91:49:f3:96:80:48:84:40:9b:77:64:5b:5b:84:29:16:d0:
94:b0:b6:7a:b7:85:da:c6:2e:7b:d5:52:b4:0b:13:e8:a8:c5:
c8:f7:d3:89:d9:7e:e8:bb:5f:ec:37:23:41:93:ad:9d:f6:c3:
c3:b2:ec:19:a2:59:0e:2c:71:b7:9c:c9:b1:6d:22:35:ed:4f:
9c:75:08:71:28:55:23:dd:f1:10:02:7c:f8:71:a1:bb:82:48:
1a:83:68:11:6a:29:06:5d:c6:06:9e:f0:33:97:f3:c0:33:bf:
4e:84:b8:bd:09:b7:6b:8f:15:69:89:46:09:11:cd:40:73:82:
03:9a:ca:63:1d:08:70:49:c6:7b:27:75:a0:1f:df:da:f7:9c:
15:63:b6:84:7b:c3:ab:08:13:15:b2:fe:56:ce:15:4c:aa:a8:
08:af:86:15:7f:df:1c:de:6e:dd:78:85:29:b6:35:26:bd:e7:
4f:58:1c:4c:92:9a:ab:74:19:58:b0:41:d6:fe:7a:5e:e2:15:
0f:cb:16:0d:e9:91:b0:e3:ff:61:2b:fa:7a:01:c6:51:6b:3d:
35:03:5f:96:1f:5e:68:2d:37:28:11:d4:f8:56:cf:9e:0f:77:
2d:b7:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:59:55 2026 by rpki-client