
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a7824af-f15c-3ff9-8e3e-b44e21a83223.roa
File: 4a7824af-f15c-3ff9-8e3e-b44e21a83223.roa (raw, json)
Hash identifier: DWiOc1DAU3c9zzcyImF0KlvrnT8Wehuswa4u3mzsf6g=
Subject key identifier: AF:29:B8:8E:94:4D:30:40:E6:2A:77:84:7A:10:39:35:8D:D0:24:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B683AE2140126AB0C8E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a7824af-f15c-3ff9-8e3e-b44e21a83223.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 2601:247:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:68:3a:e2:14:01:26:ab:0c:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=a7a9a339-8605-43a3-9e41-1f7e0e581e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:3c:bf:e4:98:3e:37:59:f0:49:4a:22:73:
73:a0:0b:0e:ad:55:76:14:e7:61:f0:d9:ab:9e:45:
be:d0:30:05:c3:0f:44:dc:c7:27:61:49:2f:14:59:
b4:49:3d:a8:a7:b8:df:d8:99:64:16:85:01:a3:08:
b2:35:07:76:4e:07:3a:46:c6:33:de:45:e3:b9:02:
8c:94:16:6c:e7:72:5f:7e:6a:de:9e:6b:ac:c5:dc:
ac:a8:62:fb:11:db:a8:36:74:d1:45:42:5f:99:bd:
d3:07:34:00:e9:51:81:ac:55:cf:0b:59:64:24:34:
a0:f6:da:fa:54:ba:b1:f1:53:b5:05:73:ef:c5:6a:
81:db:f7:37:0a:54:33:dd:a0:44:68:81:dd:c6:23:
87:8e:21:11:59:c7:66:c5:84:cf:97:62:57:86:d7:
89:ac:29:0a:eb:fa:8c:02:a0:08:ff:c4:e1:85:92:
a3:65:08:97:b8:97:41:36:cd:44:6c:6a:0e:bd:86:
f7:ef:24:9c:bd:05:fb:56:2a:7a:f4:0d:23:16:41:
be:e1:ce:ee:04:ea:75:4a:6c:34:d3:07:77:c3:05:
06:2f:55:58:9e:53:fa:53:7b:c9:c6:8e:be:61:cd:
56:22:71:9b:5c:a9:65:05:7f:c3:8a:0b:63:6e:7f:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:B8:8E:94:4D:30:40:E6:2A:77:84:7A:10:39:35:8D:D0:24:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a7824af-f15c-3ff9-8e3e-b44e21a83223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:247:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:34:0e:49:10:7d:31:47:94:f5:53:e8:b2:4a:b4:fe:98:97:
30:50:64:dc:9f:88:7e:86:fa:d8:75:2b:a0:11:87:43:a9:eb:
9b:33:21:09:29:f6:fa:67:76:84:9f:22:9d:c0:2e:1d:ff:cb:
ce:f8:e4:5d:1e:44:b4:cb:39:d0:ab:6a:ba:51:c6:32:fb:c0:
84:0c:d7:2f:51:83:49:2c:89:80:5f:b8:a7:cd:96:06:f3:a4:
20:40:16:b2:2f:29:56:cd:87:aa:58:a3:e4:f5:7e:01:c4:93:
92:45:95:a9:14:52:8b:0a:5a:1f:09:21:c8:7c:b3:6f:a4:c6:
27:87:94:67:f4:14:58:79:d2:87:43:a2:07:97:f6:42:ee:55:
47:31:f2:3e:78:44:ed:ed:6d:b5:b7:b0:35:1b:2f:dd:ca:5b:
be:52:e7:93:f7:dc:7b:e1:f8:87:86:d9:11:f3:2a:3a:b2:7d:
b1:75:30:43:8f:c8:25:c4:65:6b:b0:08:ef:f5:06:1c:70:df:
98:3b:6f:11:a7:7e:4d:3f:7f:a1:fd:7c:70:04:aa:1c:39:e1:
36:07:70:a2:53:9e:8d:c1:d2:2c:33:a4:de:e6:6a:07:96:5d:
d1:a3:d7:06:50:ce:56:68:06:91:9c:c2:e9:92:52:ba:1d:77:
0b:ac:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:00 2026 by rpki-client