
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be813bf-9f11-39c3-bd35-a64ca728600a.roa
File: 4be813bf-9f11-39c3-bd35-a64ca728600a.roa (raw, json)
Hash identifier: 9RZr8P3tWkvgd68F8GTecBG8o5R5q8lwF6Z/y1SsYyg=
Subject key identifier: 43:3D:07:E3:29:44:9E:F4:43:E1:C4:2D:11:7D:88:03:13:82:6B:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC3514B5B03A0FE0B22080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be813bf-9f11-39c3-bd35-a64ca728600a.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 2603:2401::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:35:14:b5:b0:3a:0f:e0:b2:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=601154fd-abd4-41a8-b55a-be4670d5e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:8c:4e:17:c0:04:63:05:ec:61:82:ce:7a:
fe:a6:99:2e:b4:ce:ce:85:6d:88:79:ec:ea:e1:8e:
ae:a1:a7:5f:46:8f:11:ee:43:8d:6f:87:95:19:ec:
40:9d:f8:68:cd:a2:8e:b2:a0:c8:a5:64:81:ae:c2:
79:bd:a2:63:c8:44:cd:0c:95:5d:1a:78:dd:2d:0a:
ad:68:e0:3d:50:c5:32:f2:b0:db:bf:7c:c7:32:a3:
45:79:2b:34:63:02:79:9a:40:ad:fd:29:e6:a3:dd:
46:e6:55:d0:66:3a:65:81:9e:a9:e3:13:6e:1e:84:
96:b7:be:20:44:49:e1:f6:af:84:87:45:fa:ce:5f:
90:67:4c:3b:a0:33:59:f0:ac:09:f9:96:b2:b8:5f:
d8:55:59:f1:56:95:52:71:09:d8:89:9a:2a:20:fd:
2e:21:71:ac:17:65:67:8a:42:18:73:49:a5:50:2b:
2b:37:c9:22:ab:ff:18:d1:85:d9:5c:bd:c3:03:9d:
0e:f3:47:58:38:09:e6:2e:84:66:8a:8a:2a:ab:45:
21:1e:4c:1b:cc:29:de:69:ef:ca:57:88:1d:88:f5:
f5:73:6f:48:88:55:ab:ef:56:6e:75:d0:47:52:ef:
2c:55:7e:9c:0d:42:3f:0b:4b:be:fc:1a:7d:e0:f4:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:07:E3:29:44:9E:F4:43:E1:C4:2D:11:7D:88:03:13:82:6B:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be813bf-9f11-39c3-bd35-a64ca728600a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2401::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:7f:63:45:79:6f:a1:11:04:de:42:60:26:b2:55:1d:2c:f9:
75:5e:30:f3:71:52:a0:b4:04:13:b4:8b:15:44:1c:36:f3:43:
6f:1a:f0:c0:80:98:d6:6c:70:f7:50:ee:18:f9:ce:24:41:3f:
bc:33:e7:1a:be:ae:f4:75:0f:99:34:02:6b:84:b7:86:c8:80:
41:e6:15:84:6f:14:c7:e2:6b:36:05:1f:67:4f:cb:c0:db:89:
52:ab:60:9f:70:fd:0a:a8:97:4f:68:f2:a4:2d:f5:d1:93:ef:
58:88:71:03:17:9c:33:7f:0b:75:39:95:36:9d:26:a9:10:80:
33:ce:95:c5:a0:67:e2:14:5b:2c:14:8f:16:05:da:e9:d0:96:
50:f4:5f:36:76:20:2c:bd:d8:08:34:e9:ff:b6:60:89:d3:d4:
6a:9c:7b:13:57:c3:4a:56:ca:e2:a6:98:09:c0:bc:30:77:dc:
d5:03:45:72:33:60:7f:4b:75:b7:45:90:39:15:38:1f:5d:a2:
4c:1e:78:cc:c1:c1:49:5f:c4:32:4e:4a:00:61:bb:42:88:71:
db:4a:c0:2d:be:d6:70:12:72:17:6c:0e:bc:7a:33:38:ef:48:
6d:98:81:e2:c6:e2:70:5c:9d:75:80:41:7b:07:4c:dd:2d:42:
53:7e:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:43 2026 by rpki-client