
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa
File: afab92b1-61db-3f02-a692-fdc7b78f1a50.roa (raw, json)
Hash identifier: 2kJp17ZxQLcAungDSY6Q0Lqld7Pgshl4j87ugPWuKtQ=
Subject key identifier: 3C:D0:EB:70:7F:72:4F:D2:74:4A:B0:E3:36:25:FD:F0:7A:EA:C5:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78DB25D4B4C27DD023B2E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7015
IP address blocks: 2001:559:c3ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8d:b2:5d:4b:4c:27:dd:02:3b:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c9db54a2-7144-4d36-b3be-4f772736eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:8f:86:1e:18:b0:14:18:1f:ae:d0:a3:4a:
32:22:00:0a:fa:9d:94:27:39:86:b8:d3:15:d0:cd:
13:46:d9:23:88:28:ea:04:58:a2:a1:d3:f0:2c:99:
a5:a6:a8:6a:21:30:9d:2c:be:12:4d:b5:1a:4d:a8:
6b:49:93:3d:0c:2f:69:23:aa:3b:5d:bd:35:4a:53:
b1:56:d6:3c:f7:93:f6:83:9d:be:00:93:a9:cd:42:
60:42:93:52:aa:41:fc:2f:74:f1:82:19:14:23:9a:
87:1c:c2:43:bb:13:86:da:1b:e1:14:35:ee:92:11:
48:d4:85:89:c6:8b:b9:98:2b:c7:d5:48:39:8a:db:
8a:48:d0:68:6b:4e:9e:a3:e0:08:0d:c0:e0:ae:0b:
8b:48:35:fb:5c:c2:c9:1a:80:1d:89:d4:a2:43:a8:
e6:51:7c:c4:0b:2b:66:d5:09:be:4f:6b:a1:c4:8b:
a4:02:ca:b2:91:e4:9e:cb:7c:ef:1e:eb:44:3a:6b:
9a:8b:e9:92:40:14:dc:a9:2e:88:0f:28:a5:36:85:
9c:2b:f0:b0:4b:40:93:98:21:0b:ca:4b:11:0d:49:
8b:31:35:d3:b7:8d:66:d2:ad:df:af:9b:4d:a9:a1:
4b:4f:43:eb:2b:ed:81:1d:d7:b0:15:41:d5:0d:44:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D0:EB:70:7F:72:4F:D2:74:4A:B0:E3:36:25:FD:F0:7A:EA:C5:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3ec::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ec:e5:32:29:9f:d5:e1:e5:6d:2e:c7:76:21:c6:59:a2:60:
f1:b3:38:b4:5d:8a:b2:68:e5:de:f7:20:aa:c1:56:92:2e:4e:
74:d8:17:15:2c:4e:2f:17:ef:c5:a6:71:53:d0:76:d4:85:4c:
f9:a0:94:78:a2:11:45:28:5a:a7:e2:50:10:f8:fd:b1:f4:28:
05:c4:53:3f:f4:03:79:b6:6d:44:aa:d8:97:44:a7:1b:67:63:
0c:3f:3a:42:1b:29:a4:cf:f7:7c:ac:04:bd:df:39:8c:9c:40:
07:3e:9c:a5:59:2b:a0:00:16:12:39:17:6a:30:1b:26:74:cb:
c8:c3:6e:0a:7e:cc:02:55:20:51:b4:98:03:86:8f:36:78:8f:
e0:f4:83:d9:e7:c6:02:0d:38:09:9a:61:40:2a:79:4a:2e:04:
0d:aa:42:73:c6:65:e2:d0:70:f4:0e:76:a1:4f:e7:19:98:9f:
88:2d:38:f6:22:a2:65:7a:d2:b1:b8:e3:0f:18:38:f5:d6:b6:
8e:da:a1:60:22:88:e4:b3:96:1b:b9:1e:ee:57:a7:ee:f9:c0:
a0:4f:87:4e:5c:eb:27:7f:98:a9:ec:43:a9:46:41:2e:06:dc:
f6:52:8f:4b:92:35:6d:f1:d5:7f:3a:d0:2a:c8:3d:36:28:b6:
ee:fc:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:11:12 2026 by rpki-client