
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71aad480-88ed-394c-b8db-99d42285b9d9.roa
File: 71aad480-88ed-394c-b8db-99d42285b9d9.roa (raw, json)
Hash identifier: KfWOXTWsa3m3NrbsXDwOTblRKwz9+DQE2vI+Yix9BBc=
Subject key identifier: 4C:F0:B7:2C:ED:48:F6:55:DB:CA:AF:D7:C8:C8:2F:8A:2E:A8:3C:AD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B3A72B16D69F36A353B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71aad480-88ed-394c-b8db-99d42285b9d9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 2603:301d:1f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:3a:72:b1:6d:69:f3:6a:35:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=08277af1-d773-4ca2-b601-d853b964347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:47:cd:c1:bf:d1:37:50:98:46:84:41:9c:
1a:c3:65:74:bb:84:1e:88:ec:a9:98:7e:b8:15:86:
19:65:4d:db:38:3a:b5:a4:a6:e0:32:1b:c8:2a:4b:
b8:99:8a:bb:81:e3:89:73:43:19:1e:08:c1:fe:9a:
ae:f1:0e:f9:e0:60:70:69:c7:68:92:34:84:0c:96:
2d:ac:94:02:75:24:ed:f1:bf:d6:33:80:40:16:48:
2e:68:33:bb:d8:dc:75:d0:75:d5:01:17:02:f6:1a:
ea:c2:1d:7e:1e:42:7a:02:4b:28:61:38:43:38:16:
6d:af:80:5c:05:df:f6:66:6a:37:b7:da:28:f0:da:
6c:6b:5e:09:7d:62:7a:18:12:c7:dd:9f:2b:19:6a:
d5:8e:12:68:c5:b6:13:d3:ab:a4:90:e0:dc:c4:09:
24:ab:5c:be:ab:dd:e5:8a:c8:59:fe:9b:c3:04:48:
76:76:41:df:06:f9:d5:da:af:bb:50:46:70:12:89:
5b:40:2a:83:21:95:c0:c4:28:0c:67:6d:7f:cd:fc:
32:1e:67:a0:86:10:99:e7:8a:8f:27:94:99:b6:5f:
26:d9:2b:61:b4:00:e4:6a:89:a4:10:42:a3:2f:e1:
63:ee:fe:8b:e4:5b:eb:0e:22:9c:d0:dc:c7:96:62:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:B7:2C:ED:48:F6:55:DB:CA:AF:D7:C8:C8:2F:8A:2E:A8:3C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71aad480-88ed-394c-b8db-99d42285b9d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:1f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a7:a6:f2:02:8b:f3:5b:95:95:50:67:e3:b7:6c:5c:ff:2f:
40:ca:09:38:1a:e2:90:e1:d9:b4:70:2f:99:1e:db:64:e7:14:
5c:13:4b:7b:bb:24:97:f7:0a:1c:ee:0a:be:49:77:e4:c2:98:
7a:97:89:67:b5:3f:34:c0:6b:90:4e:b7:3e:57:f4:af:00:e9:
85:2e:ab:d8:1b:9c:30:d1:23:db:19:67:95:a5:b6:89:07:4e:
2b:fd:4a:ed:a5:15:a0:d1:8d:ad:26:93:28:36:98:6e:43:e6:
9f:ba:88:4c:07:a5:dc:a4:94:4c:74:4b:24:24:75:22:53:b3:
69:ae:c5:f2:79:fd:24:d2:a0:82:48:e5:17:05:31:60:f0:ea:
2c:65:e7:7e:e6:aa:96:36:61:73:e5:52:f7:9c:4b:a7:6e:24:
da:0e:99:d2:6f:d4:db:0c:48:4d:69:e6:37:2c:28:0a:25:34:
c1:95:ec:b8:55:9e:ab:65:c9:56:81:92:f6:c7:7c:9e:da:00:
04:b2:a6:75:94:06:4e:7b:82:d2:e0:c7:e1:58:97:05:06:e3:
30:d7:ca:b4:31:9b:d2:da:7f:f1:48:29:b4:53:7b:6c:10:8e:
ae:48:2f:93:40:58:1f:65:e7:68:43:6b:e9:db:cb:ab:d2:82:
3e:62:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:19 2026 by rpki-client