
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d8318c-5a34-3429-9022-8aea4cf32c24.roa
File: 63d8318c-5a34-3429-9022-8aea4cf32c24.roa (raw, json)
Hash identifier: tQwiFnHU1aapcrc6r6sof5roz+xggRiHyfF8Oi3Zfrk=
Subject key identifier: 00:47:74:2A:C4:06:9D:10:69:9A:7F:0A:BA:BE:5B:87:20:2B:31:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57F7411D1886AA83AFF340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d8318c-5a34-3429-9022-8aea4cf32c24.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 2601:249:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:f7:41:1d:18:86:aa:83:af:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=347b71fc-d6b4-405e-90fa-1d3bab2963a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:61:e4:74:56:42:8f:39:01:20:1b:0c:eb:
6e:66:53:b8:56:d4:1c:e2:84:ff:c6:53:f1:a9:60:
53:fc:07:cf:77:b0:9e:e7:93:01:bf:b3:c3:4b:95:
0b:cf:ae:f8:94:d7:36:56:5c:c6:53:c3:c7:e1:e7:
23:9a:6c:f2:b3:30:34:f8:51:5e:45:51:19:dd:ec:
c9:c1:c7:52:12:e5:85:da:3c:6f:dc:c4:a8:ef:a8:
f7:0e:ff:c7:f3:f2:8d:6f:94:ac:bb:e3:5a:ad:1f:
16:c5:f5:d7:bd:67:7f:38:ac:3e:ac:52:d3:24:a2:
d0:39:d9:d1:51:c0:81:8a:5a:68:97:a6:54:76:b4:
a0:9c:31:fe:25:76:8e:7a:df:fb:00:f7:65:27:9f:
fc:26:5f:fe:69:38:eb:0f:a3:8b:bd:e4:28:bf:a6:
67:1c:23:aa:96:29:87:ce:39:c6:8c:1c:3e:ef:69:
07:93:f6:05:f7:34:6b:2e:53:43:c5:80:d8:77:24:
c5:4f:08:b0:d1:0f:bc:28:43:d8:d2:bf:a1:b3:f9:
59:0a:fd:c9:35:34:5a:46:31:c4:63:49:e4:48:7a:
44:c5:41:da:d9:d4:27:e4:dd:20:29:6e:e3:e6:5d:
33:66:d8:f0:c3:95:78:cb:ce:6f:29:a8:29:e1:d4:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:74:2A:C4:06:9D:10:69:9A:7F:0A:BA:BE:5B:87:20:2B:31:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d8318c-5a34-3429-9022-8aea4cf32c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:249:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:c2:34:44:5a:42:6c:f7:9b:56:5a:69:fa:8f:a0:c8:8f:d7:
78:7a:be:c8:5b:65:9e:43:a7:f2:ce:8b:f9:11:73:16:27:0a:
a2:51:29:0e:18:c7:0c:29:3f:1e:f9:f6:ff:9d:02:ff:d2:20:
b0:8a:30:c8:bc:a9:1c:1d:7c:05:cd:f9:8f:4e:90:16:d2:ed:
cd:14:d0:2f:33:12:b8:7e:3e:9c:97:70:ff:03:cf:69:a2:dd:
b4:bc:a7:53:d1:10:18:ca:5f:67:07:53:76:52:ae:ba:4f:94:
3d:40:c1:0a:d5:dc:ad:1f:6e:18:8a:86:fe:4a:6c:07:9b:70:
bc:a9:8d:15:8f:9c:b1:e6:b1:69:f8:9f:6f:7a:8b:c6:73:a9:
60:b8:8a:dc:d7:0d:ef:ab:ed:47:3e:94:89:51:49:73:54:88:
8e:2c:a5:4c:25:ba:34:03:9e:a1:ce:b4:1a:5b:bb:4f:3e:a2:
48:cf:79:d8:37:f8:6e:6b:e0:df:6c:8b:02:8a:f4:de:f5:c3:
97:f7:d3:30:4b:6e:3a:89:7d:97:42:5d:c7:84:2a:e6:5b:29:
42:75:1d:01:1a:8e:e6:c6:03:78:70:dd:a3:ae:27:49:e2:e4:
af:22:d1:a3:2e:b6:3c:0a:ac:e1:25:b9:f2:6b:86:16:4e:8f:
dc:01:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:50 2026 by rpki-client