
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ac423d-c80f-3640-b7c7-6f8f4ebc013a.roa
File: 85ac423d-c80f-3640-b7c7-6f8f4ebc013a.roa (raw, json)
Hash identifier: KESCU+aqUQgQu2KA/AczwXeSXhOkhG6thUQI5bar/8k=
Subject key identifier: 7D:36:2C:62:48:BE:90:73:AD:2D:CA:10:33:C4:FD:72:57:AF:0E:F9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78AE929A6A1CEAE1982A500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ac423d-c80f-3640-b7c7-6f8f4ebc013a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33287
IP address blocks: 2001:559:84ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8a:e9:29:a6:a1:ce:ae:19:82:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8e15d0d9-406e-4a25-a85d-c63595f45f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:52:d1:98:9a:62:04:16:2e:4b:b0:00:b3:
9c:5a:d6:21:1a:9f:ea:c0:35:5b:bc:ca:11:f2:88:
f6:c0:79:5e:8b:a8:5d:59:75:69:18:e9:96:3e:27:
8c:6d:95:4d:23:db:2a:84:db:7a:12:b5:f3:ad:35:
b4:f7:d8:cc:22:b6:13:41:26:03:ee:3d:74:73:9a:
2a:e9:e8:5d:2f:02:45:e2:2b:e3:ff:ec:e1:07:10:
a1:28:f7:ad:f4:86:ad:7b:ec:72:4e:6b:fa:81:fa:
81:7e:d2:2c:0b:ba:ca:f1:55:10:a4:47:1c:9e:14:
72:d2:8b:73:8b:1b:d2:c6:92:c1:d9:c9:f6:0b:47:
84:3b:a5:f3:6d:b1:f2:04:68:06:aa:ce:19:d5:fb:
3d:71:3a:da:cb:7b:73:c3:a9:2b:5e:ad:a4:f4:9a:
1d:82:6e:bc:70:8f:5e:13:fd:92:41:ca:0b:56:5e:
88:f7:85:31:1a:e8:0a:66:0b:ad:97:0e:06:87:8f:
57:35:ae:55:44:88:91:28:bc:a6:05:35:85:57:99:
af:b2:fe:25:99:10:c4:2f:9d:b7:3a:17:97:f3:e1:
6c:a0:52:01:c9:11:21:79:b5:67:a5:e0:eb:81:a4:
13:3c:48:74:e5:65:83:81:22:cc:ed:df:27:fb:e1:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:2C:62:48:BE:90:73:AD:2D:CA:10:33:C4:FD:72:57:AF:0E:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ac423d-c80f-3640-b7c7-6f8f4ebc013a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:84ee::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:af:cb:78:66:f0:12:34:01:56:de:c8:ec:b0:a9:8f:85:ac:
51:75:b2:b4:e4:d6:cc:d5:ae:2b:73:1e:34:f7:b4:ff:46:01:
b3:e7:65:e1:93:95:1f:26:d6:d7:90:48:fd:c5:e7:e6:87:6f:
80:21:3d:71:6f:a5:51:84:11:0e:67:da:2d:2f:2a:34:36:f2:
f6:f7:48:68:e4:67:ce:01:5a:ba:29:05:c1:de:ee:e4:1a:29:
d8:eb:df:66:7c:e0:e3:f3:ff:5f:7e:cb:73:92:ed:f2:cd:fd:
6f:f3:32:dd:da:b1:dc:df:4c:d5:db:ae:bb:bf:40:41:95:6f:
a2:11:d9:8d:5a:6d:8e:d8:7f:0a:d9:41:4e:28:56:03:85:d8:
96:93:c9:31:64:a6:86:e0:28:12:5c:df:60:6a:e6:aa:63:33:
54:74:ea:c3:19:93:af:cf:e6:e2:f8:b9:29:f2:35:be:dd:8c:
a2:8f:77:d5:6b:a4:c2:07:99:0b:f5:45:69:9e:21:10:f0:c2:
00:60:54:55:b6:dd:fd:b9:63:dd:6c:9a:89:2b:08:4c:9a:a4:
5a:b4:6b:61:16:77:c6:b4:5c:4f:b1:95:5e:d0:2e:6e:81:ae:
6b:81:e4:e5:92:6b:84:17:ae:23:74:af:9d:0a:e2:37:4f:77:
10:37:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:32:36 2026 by rpki-client