
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa
File: a95f97d1-bd72-34fe-a98a-167848eb665b.roa (raw, json)
Hash identifier: F9jOALIWx+jyVW78Pzbw/BO2D1NiR6JG3Dwq5wFLlOo=
Subject key identifier: EC:36:99:FC:A6:4F:92:B1:2D:3E:AC:CA:A4:86:51:4A:52:72:BF:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDEA787FF713DF9124324D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33657
IP address blocks: 2001:559:80b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:78:7f:f7:13:df:91:24:32:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=2cf8c133-cee7-4969-9788-396d51aa3131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:93:fd:03:c6:8e:01:6a:5c:07:91:9d:74:
e7:d5:47:9f:d5:10:3f:f0:7f:b2:67:21:12:32:2c:
cd:a2:e9:dc:e1:8f:ff:48:7c:9e:56:f6:85:b5:a5:
7f:87:b8:8b:52:98:97:87:97:7f:30:ce:99:83:c9:
81:04:a8:6b:63:75:73:6b:69:fd:b2:d0:b8:15:8e:
1f:ac:be:fa:3e:5f:7d:ca:16:bf:54:25:73:10:48:
84:f6:33:e4:67:66:2c:e3:d5:bc:92:5f:18:b1:8d:
8b:9e:f2:98:75:9a:ae:bb:96:ff:fc:46:56:50:08:
12:90:a9:ba:13:4d:63:7f:f5:43:a0:44:dc:04:11:
d3:38:40:b2:af:11:f5:b3:e4:e5:c8:b4:c8:a1:d0:
fd:12:93:eb:d1:89:a6:22:8a:62:d0:ad:9f:cd:40:
43:e1:d0:57:92:e7:94:94:d8:57:0c:32:1f:a2:e8:
a3:35:7b:a7:b8:30:2f:2b:b8:c0:d5:d3:57:06:c7:
8e:02:e1:38:12:cf:77:eb:b4:85:11:eb:7d:f8:2a:
2d:28:3e:53:d0:92:0e:82:64:b1:6a:73:53:cd:02:
3b:e5:2a:84:06:9e:bf:67:20:45:5e:05:ed:f2:6c:
07:04:d1:38:bc:25:22:46:c4:22:2e:14:e6:cf:fb:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:99:FC:A6:4F:92:B1:2D:3E:AC:CA:A4:86:51:4A:52:72:BF:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:80b3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:e3:bf:63:00:ca:1b:e1:ba:9d:54:e8:46:47:d3:95:7d:c1:
1b:59:dd:5c:f4:59:5d:f5:63:fa:36:3d:f1:40:40:95:62:75:
73:46:23:9c:98:08:7a:fd:15:4b:e6:14:f0:3f:14:0d:c1:b7:
72:37:df:1c:40:b9:79:49:d5:54:26:1d:3e:40:d1:8d:1c:d8:
d2:4f:9b:0d:07:59:32:ab:73:2d:88:11:f3:65:52:78:36:21:
c2:8b:20:b7:2b:ee:b0:4e:bd:52:bb:fa:e9:16:d6:cc:94:5b:
72:b2:a7:24:01:b7:30:d9:d4:97:07:c1:9e:b1:33:59:53:6c:
0d:ec:57:a3:2b:68:55:8e:8c:2e:84:70:a2:60:d7:d2:b3:bf:
05:c8:65:fd:ac:d8:1e:b2:3f:3d:5e:0b:a4:43:4b:44:9a:cf:
56:0a:c2:b8:86:e7:d4:9c:fb:6f:87:c8:d2:b1:3a:50:4b:9a:
b6:0b:f9:58:2b:56:5f:b9:fc:15:fc:c8:b5:7f:9c:88:9c:c0:
9a:ba:09:46:7a:a6:a2:39:93:e9:ac:12:f5:35:a0:14:09:d5:
bf:6c:53:9b:97:40:22:1e:c6:e9:bc:79:04:23:49:b5:40:f9:
f6:5e:d7:0a:52:d7:bf:34:27:fd:5e:05:e3:af:42:59:8c:09:
d2:48:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:11 2026 by rpki-client