
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa
File: 5dc29ffd-3494-37df-af40-2ac52b955896.roa (raw, json)
Hash identifier: 2fvLaY6Dtd3uWb49UKXYtxeoBYBq2dUGri+qtSvfsWU=
Subject key identifier: 86:B7:3D:7A:8E:38:15:D5:70:B3:AF:7C:E6:C6:3B:17:F5:94:97:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B31475C1EE3F66F89A380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 2601:44:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:31:47:5c:1e:e3:f6:6f:89:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bb029c84-1eaf-4a9d-8dba-e3748e41df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:0a:ba:db:3e:0b:81:d8:62:8b:01:96:1f:
44:7a:cc:28:c0:4a:57:d8:00:61:c2:7b:2e:7d:6e:
af:db:e9:36:81:75:73:04:14:9e:51:7d:12:2a:bd:
d7:5c:c3:a3:d3:b4:ce:35:19:05:ce:68:fd:97:c4:
55:33:79:3b:cc:f7:3a:b8:ff:7b:08:94:fe:4a:ce:
98:a8:a9:7f:94:f2:67:66:8f:cd:9a:9d:5c:67:5f:
be:c7:e6:17:a8:41:0e:b1:34:ec:80:44:5c:36:a5:
05:a6:f4:21:2c:68:4a:96:c6:91:e3:58:8c:83:31:
d0:bd:e2:83:b9:a8:ee:d1:6f:80:14:51:9e:a4:8f:
28:57:f5:80:30:ce:98:48:4e:50:08:68:9c:07:bd:
4a:c8:64:d5:46:0c:b5:f6:61:13:68:97:a3:f6:f7:
76:53:98:0a:8e:1b:9d:3f:00:74:e1:53:5d:9d:11:
89:27:d4:9f:46:2a:00:fd:9c:f6:4d:71:5b:50:dc:
46:05:f2:9d:00:14:6f:b0:cf:51:10:5c:04:5d:67:
28:bd:55:82:4d:ad:6b:60:98:e0:39:84:65:a5:ec:
34:4b:ee:55:84:db:c5:ef:f9:ba:98:1d:93:c3:ee:
a4:bb:83:b9:0a:22:5f:53:91:1b:87:5b:63:65:38:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:3D:7A:8E:38:15:D5:70:B3:AF:7C:E6:C6:3B:17:F5:94:97:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:44:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:7e:05:25:7a:a2:45:bc:f6:66:a4:f7:35:5b:88:f5:23:08:
29:da:8c:89:70:dd:a5:59:8e:4c:37:43:20:a8:23:7e:30:e7:
90:f2:5b:8f:b4:3d:b4:50:da:32:f4:1d:a8:c2:19:15:eb:38:
46:18:50:44:38:f4:58:d4:54:c8:57:31:84:5c:69:96:a8:59:
f6:00:68:7d:03:aa:78:11:d3:f4:07:d9:0d:c0:d3:b9:54:20:
7e:1b:c2:74:28:04:62:8a:0a:f0:e4:06:45:bb:de:b7:b1:a9:
3d:b3:88:80:cf:1b:da:20:4a:a5:df:ca:b9:be:71:b6:9b:09:
66:0e:f6:bf:e3:84:9a:ac:b4:99:14:0a:f5:d7:6d:1d:44:30:
b0:8a:c0:8e:95:4d:1c:41:fc:c3:7e:e0:f0:da:b2:6d:ae:39:
7a:7d:2b:9a:03:43:06:ff:65:36:29:7e:60:dc:e8:27:5d:4a:
32:75:a5:c1:b4:cd:e8:5a:b7:f1:b2:4e:59:a7:d6:bc:8a:60:
28:5c:dd:b5:29:92:ce:9a:75:1e:65:83:c6:8f:2e:6b:a3:49:
8e:cd:9b:31:ac:fc:c8:a6:9a:7e:51:6b:5d:83:a0:5f:43:6d:
09:08:55:85:73:13:28:03:41:cd:c4:6f:ef:f6:1f:37:f6:ed:
e6:3d:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:19 2026 by rpki-client