
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f628c7-d9aa-36a7-ac8a-42b5443d57f6.roa
File: 89f628c7-d9aa-36a7-ac8a-42b5443d57f6.roa (raw, json)
Hash identifier: 0wuzNp9K0x22uVGuz4h7/29Oz0mIv/8VGA2x9x8g5wI=
Subject key identifier: E3:7A:AA:53:19:FC:75:1F:14:5A:86:0A:91:CE:11:2F:43:DC:90:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8D84B9A64196BC346D5A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f628c7-d9aa-36a7-ac8a-42b5443d57f6.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33287
IP address blocks: 2001:559:80ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:d8:4b:9a:64:19:6b:c3:46:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=9b12fcf8-03ec-4563-86fd-f6a2842024e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:c6:38:73:26:bd:96:90:32:c3:c3:a0:df:
de:11:45:15:3e:35:75:4f:5c:55:5f:0b:bf:11:a7:
d6:cf:e4:1f:27:da:55:a6:33:c2:e9:2a:e0:f2:0a:
cc:bc:d5:0a:a8:21:3c:a6:86:49:95:f8:df:26:08:
9c:fc:fc:fb:b9:6e:6f:a9:df:25:b8:c8:80:3b:db:
1b:b9:36:0f:7b:56:d7:a5:73:6d:9e:63:55:e9:a5:
15:9a:88:b2:33:35:f9:55:c6:62:b7:20:13:4a:ab:
1b:e0:90:59:36:c7:c0:6a:b6:de:b3:b9:d6:9b:59:
47:12:50:40:d7:6a:a4:34:80:a5:bd:cd:ad:dd:1f:
28:09:b1:c9:21:c9:de:55:d7:d8:b4:ea:d3:0e:80:
e1:92:e6:87:ca:d8:65:fb:25:d9:b8:7b:28:c7:2f:
6a:7a:ce:61:00:d3:eb:e9:26:ce:72:d0:14:98:d4:
cd:e1:05:77:20:34:ed:51:ad:eb:98:4b:c8:61:ab:
fa:3c:e4:eb:6d:1f:37:58:50:d5:52:b2:2d:e1:13:
e4:de:d8:4c:54:50:f0:8f:14:8a:a5:2a:b5:3a:00:
28:27:db:86:92:95:51:97:cc:8c:bb:4c:6b:de:e1:
66:85:6d:36:c7:b3:24:da:fa:d8:80:43:8b:55:62:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7A:AA:53:19:FC:75:1F:14:5A:86:0A:91:CE:11:2F:43:DC:90:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f628c7-d9aa-36a7-ac8a-42b5443d57f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:80ba::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:d9:73:3a:86:ca:b8:b3:8e:82:6a:7a:80:83:95:f1:81:07:
d2:e2:7c:8e:e0:f3:9a:62:bd:9b:44:6d:3c:42:c6:15:8e:60:
3e:5e:ab:db:da:d9:35:aa:a3:fe:25:3f:67:9c:4b:04:ba:78:
25:b6:38:a0:2c:ea:46:bf:89:e6:de:a0:fa:85:d0:1e:e4:9c:
ab:33:5e:50:43:d2:ad:28:ae:a3:fb:57:1d:bf:a3:0e:3a:fd:
94:34:3f:66:5e:62:9e:ef:d8:4f:fd:f4:e9:9c:16:76:0c:af:
c7:f8:cd:11:38:1d:e9:19:43:b8:70:aa:8e:a9:6d:12:0d:83:
1c:d3:2e:50:af:e1:70:00:09:8a:10:53:59:c4:18:cd:e2:fa:
75:e8:24:67:42:90:9d:27:b7:60:b9:21:1f:2b:e1:3e:51:05:
32:02:c2:34:86:76:55:56:8f:47:f5:f9:23:18:f3:3c:1a:1b:
88:18:22:1d:76:ca:c2:11:70:8b:57:ca:a4:37:22:e8:5b:f4:
88:10:74:59:67:33:a0:54:54:0b:06:54:84:55:ca:01:77:0e:
1e:88:93:71:a3:01:38:41:9d:da:d8:9e:fc:e4:2b:89:8a:08:
e8:d1:e9:fb:c5:34:bc:4e:04:cf:f0:bc:08:b6:e4:fc:53:2c:
30:a3:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:38:54 2026 by rpki-client