
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933a4c0f-4da6-339d-a952-caf31412d475.roa
File: 933a4c0f-4da6-339d-a952-caf31412d475.roa (raw, json)
Hash identifier: SKjjlxOfiiZDNTbl9YVCqBpMM94bBHW6qVszSdsiCoc=
Subject key identifier: 9F:28:9B:71:9E:80:AC:0C:7F:7C:85:59:76:2A:2D:6C:68:69:49:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE87DC02B6E10327EB770B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933a4c0f-4da6-339d-a952-caf31412d475.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33657
IP address blocks: 2001:559:c2e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:87:dc:02:b6:e1:03:27:eb:77:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=c3205954-64ac-454d-b81a-9c4b6bf1b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:01:db:1f:59:b6:ca:b5:da:96:4e:ba:49:
e3:aa:1b:88:14:f6:dd:d9:a4:21:e2:f4:fc:a7:78:
48:d0:43:ca:ed:1e:4e:db:a5:db:6a:dc:8a:2d:33:
5a:9b:87:20:b0:03:2a:27:78:8b:1c:2a:7c:10:db:
91:db:63:32:31:ca:ea:86:ae:fa:7a:62:41:82:6e:
f2:cd:96:be:1c:4b:13:1d:90:6e:23:55:ce:c3:62:
a2:c3:d1:13:0c:e4:a0:48:ea:ca:ec:43:df:87:c5:
8d:c9:9d:e5:6d:40:65:85:29:89:7d:17:cb:b4:7e:
88:ed:c9:b9:2a:6e:11:70:c5:94:d0:44:55:a9:16:
08:98:dd:3f:bc:8c:df:6f:4e:4b:f7:72:6e:fe:f4:
0d:e0:0e:2b:49:53:31:bc:5f:84:04:47:bc:67:49:
3f:b6:a3:0b:e5:b2:f0:8d:f5:5e:d0:b8:b0:28:55:
03:88:62:04:73:6c:68:dc:40:75:fe:56:26:2a:47:
d1:8f:9c:01:07:0d:62:e3:9a:73:3c:2d:a0:02:51:
60:85:db:24:7c:b9:a3:dd:34:5f:52:de:a6:20:cf:
6c:4e:9a:d5:c5:a1:3b:1b:ee:b1:17:72:e4:04:63:
b8:5e:31:a8:11:6f:55:f5:0e:81:18:22:1d:14:79:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:9B:71:9E:80:AC:0C:7F:7C:85:59:76:2A:2D:6C:68:69:49:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933a4c0f-4da6-339d-a952-caf31412d475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c2e1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:8f:62:7f:e3:07:2c:97:f7:ba:e7:32:1b:f3:0d:36:d9:ac:
8c:82:29:5c:79:a1:01:e6:4c:92:c8:38:1f:a7:00:a1:a2:29:
ff:75:83:87:a5:9d:43:db:8d:1b:05:a2:1a:17:76:df:34:f0:
10:40:57:22:d5:bd:6c:76:10:f4:ca:31:c2:9b:a5:75:60:f0:
52:0e:31:40:be:84:ae:f7:fa:5c:c0:ee:16:63:c5:b0:42:f1:
51:f6:35:70:ca:12:fa:c0:92:c0:91:ee:2e:8c:f1:6c:79:d4:
c3:76:0a:05:6e:53:46:bb:09:b2:61:78:38:9a:5b:1f:3a:82:
4e:21:61:d0:59:42:b4:c8:02:eb:e8:d4:4f:3a:09:36:a8:c5:
c6:a3:42:57:cd:12:7e:c1:ad:98:3e:ea:87:60:ca:74:56:69:
01:53:41:04:74:e3:23:57:7c:20:d5:82:09:6f:95:7a:06:95:
45:41:c9:02:6e:6a:ea:6f:49:a8:48:70:3e:8c:0d:5a:22:5f:
d4:77:45:94:8a:23:97:da:f3:ed:56:f3:af:e9:0b:56:a3:28:
2c:eb:3f:d2:94:30:73:eb:8e:e9:30:d8:ea:b3:c2:79:df:91:
3d:03:53:39:1c:c9:50:82:b7:7d:0b:c7:7d:e8:9c:07:b3:75:
54:8e:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:37:36 2026 by rpki-client