
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42f4a86a-fbee-3082-9ff5-f7af22a96810.roa
File: 42f4a86a-fbee-3082-9ff5-f7af22a96810.roa (raw, json)
Hash identifier: krj1FxOxXJZx4kU5U37BWJShqdiz6N+n4CBj7gpW3e8=
Subject key identifier: C5:FD:C7:00:5C:79:8D:19:19:C7:C6:4F:E3:3B:9D:16:07:3A:35:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F87068EAAEB28144ED300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42f4a86a-fbee-3082-9ff5-f7af22a96810.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 2601:403:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:87:06:8e:aa:eb:28:14:4e:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=585a60f6-c78f-408d-84fc-b0f1bb3db426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:ab:21:57:aa:25:8c:6f:e0:ec:f1:09:b0:
03:57:65:b2:26:00:88:19:95:25:5b:54:75:51:ac:
11:d6:63:03:d6:5e:8a:27:ad:ab:c0:a9:d1:20:83:
12:10:b6:23:b9:d1:54:96:b8:64:62:5f:f4:b1:7a:
eb:cd:6c:58:6c:45:03:16:04:17:2b:71:12:47:c9:
3e:b7:dd:e6:30:ff:dc:aa:e6:ab:4c:fe:86:7c:4f:
a8:63:57:43:db:a5:98:5f:c6:40:7a:a6:71:34:9d:
e0:3d:9a:5e:58:cc:da:ea:a4:1f:65:63:11:78:d2:
70:39:12:67:8d:48:95:72:64:4d:07:af:40:e9:78:
1a:b5:44:a1:13:26:33:d9:cc:24:13:7d:07:9a:b1:
97:d6:5c:c0:82:f1:85:1d:df:65:82:b7:8b:5e:e5:
bd:da:ba:5d:0b:51:65:f6:ac:f8:79:67:ef:0f:84:
0a:1e:0b:f2:a8:77:7f:bb:4c:45:c2:c5:3b:9f:b2:
87:30:e6:3c:aa:45:61:5f:dd:55:60:48:ef:06:6a:
7b:4e:39:c2:1a:aa:d1:e1:3e:1a:ac:df:cf:a1:bb:
20:7b:68:31:19:1b:45:80:76:34:c1:89:f6:e3:f3:
91:a4:54:e7:5e:83:ea:0b:08:00:5a:09:6a:43:39:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:C7:00:5C:79:8D:19:19:C7:C6:4F:E3:3B:9D:16:07:3A:35:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42f4a86a-fbee-3082-9ff5-f7af22a96810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:403:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9e:30:5a:e8:6f:d1:bb:00:d9:27:16:e2:02:f4:c3:bd:1f:
bb:11:fa:34:2b:69:b9:ef:7d:6d:0f:f6:07:49:4e:be:84:84:
7c:fd:80:ba:26:9d:c3:d3:9d:8d:06:cf:47:ec:16:b7:e4:c9:
da:8c:0e:37:79:55:29:e0:46:e9:a6:02:45:31:ba:9c:1c:c8:
fa:55:7e:ec:3a:c9:7f:f7:3d:ad:bf:35:ac:79:24:59:2b:79:
e7:0d:53:e5:92:24:20:ef:2d:75:87:7c:f4:ad:a8:d8:31:e7:
9a:f5:1e:34:18:48:44:c6:4b:95:61:7a:66:1b:59:dd:d2:48:
f2:2d:9d:2a:c6:72:7e:45:58:3d:de:f0:0b:98:ab:7a:a0:df:
fb:75:ad:c2:c9:6b:64:a4:43:56:87:8c:d3:66:23:45:f7:88:
7b:77:a0:04:00:04:32:74:da:90:d5:18:1a:9e:f2:d1:1a:79:
25:de:d9:4a:ea:38:83:01:57:0f:d1:bd:49:98:cf:ef:03:89:
aa:c6:19:06:8e:ce:23:b5:78:c9:3e:d2:14:26:a6:9d:a8:30:
c2:dd:43:f5:80:74:ce:fb:82:3e:7e:38:a4:50:05:60:68:55:
dd:34:be:84:a1:49:63:ca:1c:47:a3:de:27:b3:16:92:a3:79:
c9:5d:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:13:22 2026 by rpki-client