
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
File: 8665210a-3e79-3ad7-a3e4-1f37a81be149.roa (raw, json)
Hash identifier: OfM3aSyG8JZPiarN1s/u+xlzmsXXxKDyhngKaNam0JE=
Subject key identifier: AB:42:6E:BA:78:08:82:82:CF:12:28:57:21:3E:77:C0:2F:90:24:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57ACAC4BBEC7BA4132A3F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 2603:208c:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:ac:ac:4b:be:c7:ba:41:32:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=868973a7-418e-4d58-95b3-eee678eed171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:74:30:4b:de:8c:bc:3b:04:51:51:99:11:
93:42:17:46:91:89:12:08:9c:53:7f:c6:0c:4f:fe:
93:89:c6:ed:22:9e:32:20:fb:e9:25:f4:d8:96:92:
32:b8:92:bb:07:1f:d9:aa:7f:bc:3d:b2:f0:1c:bb:
e8:95:02:b3:79:d8:06:02:e8:f9:72:1f:02:87:ce:
9f:25:d9:b5:cc:0f:f0:42:42:e1:d4:7e:1b:d7:20:
07:71:66:30:b5:1b:01:bc:bd:54:e6:26:dc:18:2a:
b0:1f:f4:62:11:ce:e1:e5:55:dc:b5:a0:37:19:9d:
e4:80:83:37:bd:90:4e:95:44:af:f3:7b:91:05:fe:
91:0e:5f:12:d1:cf:95:e5:e6:b2:0b:70:9e:6e:7e:
26:ea:85:5d:c5:da:ed:9f:9f:44:d8:77:a0:11:b7:
d8:85:3e:9e:d4:3b:ed:c2:7e:a0:ee:4b:5d:18:47:
85:b2:85:c4:60:ab:2b:68:67:f6:11:b4:fd:a1:18:
19:d1:df:cb:7a:86:fd:fe:24:6a:7e:a4:4f:68:3d:
2d:24:de:77:08:d4:d2:36:8b:70:96:94:2f:14:be:
8f:23:32:85:32:5b:39:25:28:3c:ca:48:ad:a9:73:
f7:4c:22:b1:29:8a:65:df:09:47:79:9b:ba:26:73:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:6E:BA:78:08:82:82:CF:12:28:57:21:3E:77:C0:2F:90:24:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8665210a-3e79-3ad7-a3e4-1f37a81be149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:208c:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:47:76:fb:e6:b4:cf:58:c6:c4:6d:f2:0d:e5:1e:0d:ab:09:
c9:06:b4:1c:e6:12:ab:19:97:8a:51:28:14:81:c7:0b:2b:35:
c8:8a:63:fa:cf:7f:49:95:a5:27:af:83:5e:d8:af:79:c8:f6:
6c:9a:04:11:c0:2c:f1:eb:5f:f6:08:94:4e:15:44:2f:ec:ae:
f1:33:05:c4:b4:ec:9a:9a:f5:3c:54:d6:48:de:c1:0b:b8:a2:
97:d6:26:e8:2b:23:37:9a:c9:51:8f:a6:18:ce:a0:a6:8f:e6:
2b:4d:59:d9:c8:23:45:13:31:70:42:7c:e8:1e:1e:81:e8:ed:
c5:70:3e:13:1c:2f:f7:c8:d7:74:41:a9:f8:2c:33:51:b6:75:
9f:de:9a:51:a1:a9:90:28:25:a1:e8:9a:9e:d2:5c:f4:a1:0f:
20:4e:dc:14:ca:07:2c:c2:04:c1:3c:7d:82:8a:4d:17:cd:14:
2d:ee:62:ea:3b:b6:b1:72:17:8d:39:e1:64:37:34:9b:74:b7:
b3:6c:f2:b9:da:78:64:8e:57:15:0f:f9:6d:15:82:b6:ad:1f:
1f:7d:3e:da:a2:64:0c:5f:88:2b:20:36:ae:04:e3:e0:c9:84:
65:58:e1:e1:11:54:91:0d:76:2d:91:7b:10:44:c1:4e:77:d7:
be:dc:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:18 2026 by rpki-client