
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/771c28c7-e799-3bac-a8e7-6f661b9f0716.roa
File: 771c28c7-e799-3bac-a8e7-6f661b9f0716.roa (raw, json)
Hash identifier: F+RL+mdtUfjjwB8n7I4IT4scCZUJ8X7h2opq1TY49+o=
Subject key identifier: 88:2E:4C:28:A9:2D:40:9F:57:DA:E2:B2:D8:0E:A6:B5:CF:CA:B3:94
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58BBA533EACF3D6C22D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/771c28c7-e799-3bac-a8e7-6f661b9f0716.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 2601:648:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:bb:a5:33:ea:cf:3d:6c:22:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c8c562e2-ceba-4e06-a84c-5182bdf167f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:4e:56:59:a0:f8:2a:5e:57:61:d3:51:2a:
63:a3:35:68:31:d4:9f:a0:51:af:59:e8:4d:7a:00:
81:1a:32:eb:73:33:55:4d:72:8e:91:14:61:c8:75:
58:89:31:7e:93:25:ac:f4:66:0d:4a:46:6f:ba:1e:
30:e1:1b:ed:9f:ab:61:4e:8a:59:ee:60:18:80:af:
94:bd:10:fd:e2:2b:57:ae:65:c8:d6:e0:1d:02:2b:
f8:db:f3:a7:54:77:fc:55:cc:73:69:5c:88:43:16:
c3:dd:cc:b6:93:93:0f:fc:5d:86:e9:06:03:bf:79:
c8:73:00:35:d0:ea:24:39:d3:e2:e4:70:c8:a5:79:
8d:4a:2c:97:66:e9:d3:da:a0:80:b2:8b:eb:16:18:
02:de:65:73:18:bb:fc:cc:eb:6a:37:d0:27:e3:f7:
5f:e3:99:c6:11:67:a6:4e:88:bb:1a:82:06:5e:0d:
79:aa:97:72:4c:52:25:68:e2:6c:6f:d4:4e:89:4b:
81:01:71:4d:8a:d7:db:6e:34:ee:fb:22:9d:d5:6c:
90:fd:be:68:fb:17:8a:f1:26:f9:b1:3b:b0:84:c0:
f8:94:af:75:b6:23:cc:da:44:e6:78:3c:bf:5a:c8:
c8:8d:49:ac:6c:a7:6c:f6:2c:74:31:73:25:2a:04:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:4C:28:A9:2D:40:9F:57:DA:E2:B2:D8:0E:A6:B5:CF:CA:B3:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/771c28c7-e799-3bac-a8e7-6f661b9f0716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:648:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:41:7e:9c:59:30:0e:8d:ef:d9:32:0b:0e:53:78:af:47:7c:
3c:fa:cb:6e:f4:d9:f8:88:c4:a6:24:3a:be:59:fc:1d:da:4b:
90:71:8d:da:42:f9:0b:2a:08:85:c9:d9:d3:a8:84:ec:7d:29:
40:c1:6e:a1:33:5f:c3:0c:15:af:fd:d0:ab:2e:9c:61:c2:3a:
b2:11:36:58:f5:b4:93:6e:ca:af:1c:d8:92:f1:31:02:9e:6d:
fc:4a:49:5a:9b:0a:01:71:de:6a:86:ec:ea:80:fe:75:6d:6c:
59:ea:7b:13:17:05:8d:07:77:43:e6:6a:c4:54:73:49:6a:91:
e5:bd:26:fd:df:42:32:9f:03:d2:ab:de:c6:7e:a1:c1:b7:54:
75:95:9d:79:0d:27:7a:07:06:70:7b:ae:f1:45:80:97:5e:00:
22:c3:6d:bc:64:b3:b1:37:16:3c:14:ca:24:c1:42:a0:93:fd:
8b:e0:7e:6b:e8:53:1b:7d:b7:0c:a0:a0:60:75:e7:4d:d5:be:
d7:7b:31:6f:53:24:bb:c7:1e:99:ee:ed:23:f3:8c:3c:3e:fd:
8e:05:eb:89:07:9c:bb:9f:4f:97:09:ca:18:f0:a5:29:af:02:
b2:83:d8:0e:c3:19:66:fb:16:86:f5:0f:1e:48:e1:02:92:1d:
33:e2:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:37:34 2026 by rpki-client