
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e674474-d6f1-3a61-8097-6db6b3a901ad.roa
File: 3e674474-d6f1-3a61-8097-6db6b3a901ad.roa (raw, json)
Hash identifier: lTnQ9hGjj6ODnUtOXecEEiu7K9v6+LbIMcGwtBm9FoE=
Subject key identifier: 21:0C:09:6F:F0:28:DB:EB:8F:08:96:A4:01:43:0C:57:C6:81:6E:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D5243959C13DC733D313D4500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e674474-d6f1-3a61-8097-6db6b3a901ad.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22258
IP address blocks: 2603:23c7:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:95:9c:13:dc:73:3d:31:3d:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=a44ca01c-4505-42da-a33a-d3a8593b70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:1f:e9:97:cc:8c:83:97:f8:12:a2:70:71:
63:e8:35:1b:9c:9a:e3:2a:d2:12:5d:88:e4:3c:0c:
4e:11:f8:21:aa:35:89:17:5d:0f:43:d6:6c:db:3b:
e0:78:27:35:4b:24:86:07:30:b1:7a:9e:54:91:f2:
27:8a:ef:57:fc:e4:95:73:de:70:11:cc:84:3a:4b:
66:62:ed:12:9d:46:33:90:50:5a:0e:3c:f0:08:0a:
56:95:a4:5a:fe:fa:62:84:78:94:2a:64:7f:96:be:
e9:a3:7e:c5:5d:1f:30:c4:d2:ae:98:1c:fc:43:2b:
3c:bd:62:11:6e:cf:f2:88:e0:3e:a0:cb:9b:95:d8:
84:28:3e:d2:71:29:13:32:f3:04:49:b8:6c:60:9a:
aa:0b:28:8c:5a:4d:6d:3a:45:62:99:ed:0b:e8:b5:
12:ae:e8:b1:fa:90:08:c7:96:3f:ce:46:fe:04:da:
93:89:76:74:9e:61:27:dc:f5:1e:0b:bb:81:1a:a4:
73:89:79:f3:6f:a0:ae:94:0c:11:0e:b2:20:5b:b3:
87:f3:02:3a:d4:36:bb:3e:d6:cf:bb:00:fe:14:13:
06:bf:26:a8:7b:58:98:11:c2:9d:7d:20:a6:07:15:
d3:2e:e5:4f:c5:53:d3:1f:f9:b5:4d:3c:18:60:c5:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:09:6F:F0:28:DB:EB:8F:08:96:A4:01:43:0C:57:C6:81:6E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e674474-d6f1-3a61-8097-6db6b3a901ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:23c7:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:90:f7:c0:7b:e4:5a:c2:a4:a3:70:5a:fd:2f:4c:92:c6:ca:
9c:f9:76:04:76:4c:7a:16:06:c1:5b:b5:d3:24:12:b6:6b:1c:
55:4c:e6:c4:be:0a:8c:be:9f:3c:f0:9d:ba:02:91:d7:18:26:
4a:61:f9:16:74:ec:d1:26:2b:77:73:0f:bf:48:8c:5c:3b:af:
b7:55:38:77:26:74:45:f9:20:6a:67:a7:c1:95:80:03:08:b2:
28:f4:56:4a:54:63:51:46:9b:20:03:76:42:43:05:ba:41:20:
50:14:ba:87:2c:d9:46:62:1c:18:60:7d:8a:17:ea:05:53:3c:
db:96:51:a0:7f:cb:31:b5:d3:6b:b3:43:a5:c5:bb:36:0a:67:
cc:bb:f9:5f:64:5f:c2:c7:0c:f6:d3:89:b6:67:bc:28:c9:b9:
12:92:6d:f9:55:08:23:80:df:a6:31:a8:2b:3e:ea:d6:63:78:
88:dc:69:7b:c3:35:2b:ec:b6:eb:bd:8a:7e:d6:2a:96:5a:35:
09:0c:d1:09:ef:dd:10:3f:84:9e:2c:cd:43:ca:4c:fc:d6:e6:
d5:71:1f:63:e2:26:13:ed:ad:be:b7:ce:f3:e6:10:d0:67:f0:
82:66:40:cb:72:ca:27:80:ad:b9:82:3d:13:3e:bc:7a:67:f5:
56:8c:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:39 2026 by rpki-client