
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e7b0b2-5afc-3ec8-9f8d-ac5d014cd878.roa
File: a2e7b0b2-5afc-3ec8-9f8d-ac5d014cd878.roa (raw, json)
Hash identifier: NsEOwynnmnxabvwuI4ueq+qtD5A08VUaWgB5eKcwr0U=
Subject key identifier: 0C:35:62:7D:5E:5F:8B:F6:0B:41:E0:C1:D2:5D:FB:EF:23:2E:E8:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D524362A43B102CF31E855EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e7b0b2-5afc-3ec8-9f8d-ac5d014cd878.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 7016
IP address blocks: 2601:985:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:62:a4:3b:10:2c:f3:1e:85:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=d62cb03c-de80-4694-bf9c-7015cbe19f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:6c:9a:0e:51:60:cd:19:19:44:d6:ac:f5:
0d:60:11:1f:6d:19:31:5d:fc:04:8d:25:26:d2:38:
01:be:9d:3a:8c:68:c5:26:0b:ee:a6:c2:3f:92:b3:
1f:b4:5c:81:d5:6c:62:13:2c:aa:36:a7:22:87:a6:
cf:e8:5b:6d:18:af:af:49:4c:53:13:d6:25:dd:ea:
5a:b0:68:d5:18:a9:dd:76:ac:f6:b8:38:60:0f:37:
b8:4b:d4:eb:95:c9:d2:6e:a3:72:27:64:26:9d:2d:
c7:77:11:4f:73:c0:83:9f:08:86:5b:ee:6f:15:56:
1f:16:cc:e2:5d:c8:70:b8:a5:0c:9c:ef:e7:e1:c3:
d0:8f:47:51:3e:e4:0e:6d:2e:f1:71:98:c4:60:13:
2c:72:f9:a0:bb:8d:95:aa:19:ea:b4:0f:eb:06:af:
7e:c5:f5:9f:31:4e:0e:11:46:eb:fa:cf:02:d9:3c:
6e:3d:3a:c0:77:0b:32:0e:94:2b:d6:e7:fc:7a:a3:
7d:d3:67:59:39:7f:36:1c:97:e4:26:e8:94:b2:01:
35:18:e4:03:fd:64:82:65:d7:b3:a3:19:f8:e7:bf:
cd:25:c0:50:a4:15:9a:f5:fd:29:ae:37:5a:a6:44:
4e:32:3f:6e:f4:63:db:1a:c8:36:90:1b:3f:cc:26:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:62:7D:5E:5F:8B:F6:0B:41:E0:C1:D2:5D:FB:EF:23:2E:E8:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e7b0b2-5afc-3ec8-9f8d-ac5d014cd878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:985:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e7:6e:a3:43:53:ee:93:62:1e:7a:bf:ba:8a:4e:2c:03:e2:
d0:c3:9b:6e:c3:12:4b:e7:57:d6:37:72:7f:7d:3d:c4:43:a0:
90:ef:0d:0f:c7:ee:ad:38:c7:8a:6d:5e:de:ec:35:ba:a7:2d:
14:7b:88:5c:71:48:a0:fd:5b:fe:d3:d7:17:77:f5:15:c5:66:
27:c8:a6:61:2f:3c:a8:9b:49:2e:fd:0f:52:1a:e8:c7:a3:2e:
98:fe:a2:9b:d7:0f:6e:55:13:43:3c:9f:9f:e5:08:13:7d:ef:
bf:a7:9f:47:37:59:72:f5:a7:a6:7b:c8:8f:32:2b:70:ec:c4:
9e:c6:e7:eb:a7:10:a3:da:5a:05:b0:d6:0a:8f:44:c5:74:3d:
bc:ca:35:13:0c:40:88:09:27:07:3a:c3:f2:a1:be:7e:02:4f:
ac:c2:b9:26:c3:c3:29:73:92:9e:bb:ae:d1:91:9a:ad:44:33:
a0:e1:04:ac:78:8b:68:4a:7a:aa:ec:e8:9f:87:2b:b2:1c:33:
bb:62:c7:75:50:5b:fc:9d:12:5f:c6:7f:cb:c5:3e:0f:68:f6:
7c:19:3a:20:ae:54:9f:42:89:19:54:d6:0e:0d:04:14:2e:97:
3c:40:f4:a3:fe:76:4a:4e:a6:44:2d:69:19:5e:2c:1e:d6:87:
4e:e9:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:26:11 2026 by rpki-client