
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cca3bf3-c5a9-377b-8d5d-59a67637fb50.roa
File: 9cca3bf3-c5a9-377b-8d5d-59a67637fb50.roa (raw, json)
Hash identifier: 0l3vWiCHBCKKRhHe3vBuoBQXPwcVxZMcE4ibjJgsYjg=
Subject key identifier: B9:1B:41:36:07:09:80:E5:84:D0:59:95:0F:78:7D:95:86:9A:C7:92
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A9A12A3786802BED93C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cca3bf3-c5a9-377b-8d5d-59a67637fb50.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 2603:301b:1b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:9a:12:a3:78:68:02:be:d9:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=db7d4a40-f9e6-4c54-bf13-5c0a8f11aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:75:00:10:ee:57:07:2c:17:18:7d:c2:31:
89:37:c5:4b:ec:d0:0f:29:88:5b:5e:32:f5:70:e5:
18:df:45:30:36:95:4c:6a:5f:31:51:3d:40:f3:5c:
a0:14:77:9a:ba:7a:1d:61:ca:f2:6f:b4:b1:3d:22:
19:69:21:4d:4c:50:8b:74:61:00:57:27:6a:f1:7c:
8d:9a:fb:9c:04:ea:bf:dc:11:78:38:83:64:bf:95:
97:35:17:8a:8e:50:53:03:a5:0f:5d:04:9e:1e:06:
89:8a:01:4a:1d:39:11:d9:3a:e1:49:4d:0c:ef:a9:
09:a5:16:fe:c0:0f:ae:fb:1b:2a:d2:75:39:6c:a5:
58:04:ce:cd:1c:c3:98:9e:1e:46:ef:ad:3e:1e:34:
06:d6:61:ab:bc:fc:37:20:bc:56:ae:0f:b8:0c:f5:
59:ac:e8:42:25:a0:7c:73:67:bc:2e:96:3b:76:c9:
cc:55:c8:ba:a3:67:d0:a2:a2:e7:97:43:57:a3:5a:
39:1f:19:99:48:50:be:8a:0d:14:cc:48:05:34:8e:
7e:51:c9:95:3e:ad:8a:96:c0:c3:ca:34:e5:b3:75:
f5:7a:c9:ad:4e:eb:43:31:e5:91:6d:e9:0c:5c:0a:
98:11:1a:1e:3a:00:e8:5c:b1:4a:53:03:f2:b9:fd:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:41:36:07:09:80:E5:84:D0:59:95:0F:78:7D:95:86:9A:C7:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cca3bf3-c5a9-377b-8d5d-59a67637fb50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301b:1b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:8c:ee:6c:0a:4a:a1:81:bb:af:5f:f1:6c:8c:e0:c3:65:63:
bf:e2:aa:f6:ee:1f:3b:d5:b0:6d:e6:77:e8:59:ae:38:ec:09:
9a:e9:ef:7e:dc:59:f8:52:8a:4a:77:78:6b:ea:d0:dc:26:f0:
d8:13:7c:0d:ca:08:57:01:fd:19:aa:98:d8:8f:2e:85:b8:eb:
5c:14:22:35:70:fd:6f:04:e4:73:71:c0:2d:12:65:2a:b7:45:
0d:b9:7a:b4:3e:fc:21:42:fc:4d:b6:3b:21:ce:91:be:af:2d:
7b:e1:fc:f2:d6:8e:ba:0b:99:a6:87:d4:78:89:98:92:d6:51:
d8:bc:a3:f6:f0:a4:d8:69:cf:2b:21:69:78:46:98:c3:84:2f:
81:40:8f:6e:fc:4e:61:73:b8:dd:3f:04:4b:f0:9f:3c:f9:be:
3b:d7:a2:17:40:68:64:7d:d7:bf:e8:c4:08:c0:4d:d5:b1:a1:
16:f9:df:40:d9:06:5f:07:d5:8f:b4:12:ba:76:c1:66:ea:4e:
19:de:c4:b6:33:78:96:f4:63:5b:f2:3c:77:46:25:0a:75:fc:
4a:a3:99:15:48:e3:8e:66:70:14:cf:a7:38:8b:54:e2:21:05:
b2:40:3b:29:cc:52:cf:43:48:0b:b9:d8:56:8b:8e:50:97:cf:
e4:f8:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:36:38 2026 by rpki-client