
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa
File: 3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa (raw, json)
Hash identifier: Ql8T7Dh+WFrMIXIMj2YU9OI0GHiDNOXgp9miv5xG2gU=
Subject key identifier: 3E:C2:41:6C:67:71:CE:70:BF:56:AB:FD:2A:4A:EB:E0:4A:45:62:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78A317DF61FC553C14D9380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7015
IP address blocks: 2001:559:c3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8a:31:7d:f6:1f:c5:53:c1:4d:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8e3de101-8694-45ff-9788-b043d0211b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:7b:5c:a4:9f:04:af:dd:2d:bd:78:98:f9:
80:e2:9e:73:26:d7:d1:20:f1:0b:1c:42:e6:b7:53:
6e:9c:34:93:8f:07:12:9d:ab:70:18:d8:a8:7d:6c:
c4:1c:56:cc:ee:20:3c:48:ac:cc:18:15:13:76:d4:
ee:b1:43:17:83:a2:55:93:9c:3b:cf:bd:00:52:32:
1e:71:cc:f2:62:e5:80:59:d3:4b:b5:be:03:25:22:
a9:5d:18:91:4d:cd:f6:0d:18:c1:71:86:ba:a5:89:
b6:2d:33:14:40:9f:cf:a8:de:54:6e:bd:9b:db:3a:
53:f0:ab:ef:d4:ae:67:7d:3b:7d:66:04:97:2e:94:
3d:d8:17:55:68:d5:70:bc:bc:7a:e0:89:e6:1a:49:
9f:c9:57:19:e8:24:7f:3f:a5:b4:9f:1c:18:c2:a0:
8a:2f:d2:33:1b:7f:62:38:a1:de:4f:69:37:37:c1:
14:b5:9d:2e:10:59:5b:9d:f6:b3:a5:cc:f1:11:2a:
92:06:6f:23:fb:3a:10:8f:4d:98:34:8a:7e:3b:7e:
83:7f:e8:db:1d:c6:70:37:30:39:ff:b6:d6:21:4b:
20:75:60:ca:87:6f:19:4d:5e:ba:5b:52:87:28:84:
8e:98:d5:03:21:12:7b:91:aa:f4:2d:64:fd:86:78:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:41:6C:67:71:CE:70:BF:56:AB:FD:2A:4A:EB:E0:4A:45:62:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3e8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3b:f1:02:51:9c:6a:b3:08:97:8a:b1:61:d2:26:87:21:85:
2a:2b:be:0d:ad:2c:dd:d0:ae:6c:40:83:6d:b0:93:d1:57:f1:
7f:23:18:0e:59:19:ce:bf:9e:65:04:7c:f1:51:cb:5f:97:50:
87:8b:10:1b:61:64:e3:14:14:df:6f:17:cd:bd:ce:3e:f5:46:
03:e9:81:d0:63:d2:91:94:8c:4b:96:a8:4d:8b:99:ab:c8:92:
3a:c5:dd:35:c0:1b:91:50:07:c4:65:ac:5b:a3:fb:9d:da:98:
15:00:91:46:b0:37:b6:3d:f3:02:13:ad:03:de:0d:17:16:55:
d2:32:3f:20:9e:f6:d6:59:35:dd:26:d7:f6:dd:e8:2f:0f:61:
95:43:38:89:86:64:15:b5:e3:82:d9:97:7a:7d:b7:00:67:92:
6e:6e:56:57:9f:6d:51:28:fd:9f:5b:48:f2:bf:12:8d:15:bc:
98:23:7f:2c:fa:0d:a4:8b:c4:63:19:85:a7:61:2d:41:9a:e9:
01:27:66:36:35:11:27:43:09:97:1d:07:e3:83:f4:91:3d:98:
1c:92:4c:cc:2a:ca:cd:05:25:53:9d:d1:f6:18:c8:93:7d:fe:
8a:8c:65:78:5e:e4:37:61:97:9c:3f:bb:af:fb:b5:46:f5:0b:
53:2f:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:00 2026 by rpki-client