
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b25ccccc-2650-3e81-bbf0-8f0dd2fa8503.roa
File: b25ccccc-2650-3e81-bbf0-8f0dd2fa8503.roa (raw, json)
Hash identifier: GkQaweWQIqRswx6SLnNKn1q9DN/+lyjSwts4c9VEUH8=
Subject key identifier: 54:3D:02:D2:65:B4:45:EC:25:10:06:41:33:3A:02:80:4B:75:06:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8C226DA17C5F20E05B2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b25ccccc-2650-3e81-bbf0-8f0dd2fa8503.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 13367
IP address blocks: 2603:2443::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:c2:26:da:17:c5:f2:0e:05:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=9d5ff96e-2e21-4872-8717-9ecb78c99cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:ad:ba:ca:14:19:63:e8:df:3d:1e:e6:4a:
20:31:5f:bb:f2:70:80:80:b4:39:bf:e0:59:a0:43:
26:9d:5b:e5:a9:1c:4d:e1:8e:87:3d:3a:54:35:0a:
3e:5d:ef:54:10:57:dd:13:74:81:34:88:03:8a:82:
9e:63:8c:e4:19:56:e7:1c:c6:2f:d7:38:b6:34:07:
22:54:da:8a:c6:48:cf:6e:4b:38:15:ed:6c:0e:b3:
b8:99:f6:e4:ee:81:fd:bd:58:e4:2a:b9:c7:8e:97:
0f:9a:66:45:0b:cd:b4:68:6a:17:00:35:57:95:40:
4d:c8:39:24:9d:18:f8:ad:d1:00:30:b4:71:11:c2:
3b:04:84:cb:82:df:5d:04:99:7a:14:1c:c0:08:a4:
48:7f:ae:dc:af:5b:11:6f:c5:4a:af:02:c3:66:e2:
18:45:49:2c:bf:b0:87:79:43:89:b7:3e:91:f7:31:
24:86:78:ae:9f:cc:86:67:d5:46:6c:10:ac:e6:b0:
48:a8:63:ed:d0:1c:d9:a1:0a:f9:38:cb:d2:59:c4:
3e:a8:52:5b:ed:c5:79:7b:e6:1c:85:f6:52:27:6b:
93:7d:b7:25:9b:8b:c9:63:fa:e5:ce:16:18:9c:02:
76:a1:ce:60:97:5d:8e:34:d7:d4:23:08:06:69:d1:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:02:D2:65:B4:45:EC:25:10:06:41:33:3A:02:80:4B:75:06:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b25ccccc-2650-3e81-bbf0-8f0dd2fa8503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2443::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0e:7d:26:38:47:ec:aa:cf:48:41:aa:88:9c:9b:39:b9:a2:
e4:98:bd:b5:89:08:82:38:c9:1b:52:e4:22:96:46:09:9a:9c:
cb:c0:48:8f:5b:6f:cd:46:e9:ee:c5:4d:7c:06:de:ad:79:73:
11:d5:9c:30:d8:a0:80:e4:c5:3e:b1:8e:8a:9b:d5:47:82:6e:
13:a8:df:4f:9d:5c:1a:df:a6:c0:19:a0:eb:c8:30:4a:be:5c:
0d:15:e3:6f:80:33:a9:f2:3b:6d:82:ed:71:bc:fc:d2:d3:1a:
a2:24:73:9b:ff:75:bd:7b:5d:a1:61:86:8d:97:a3:4c:2c:2c:
0f:e6:7f:05:ee:86:10:9e:90:19:d3:50:7d:fb:dc:96:7f:5e:
0c:2c:74:db:7d:16:c0:de:8e:a1:79:ca:94:a5:30:f0:37:64:
a0:97:4b:d6:c5:57:10:d5:e1:7c:a5:d7:2c:12:e7:09:e2:57:
69:f6:52:f9:28:26:9a:57:b0:b6:84:a2:82:62:c2:73:c4:17:
df:a0:5a:45:0f:2b:8d:96:51:0e:df:67:3f:44:cd:13:2e:33:
40:b8:47:8a:f0:1b:39:8c:99:e7:66:c9:0b:d0:bc:9b:32:75:
43:e6:44:80:f7:f9:70:fa:48:dc:1e:cd:58:06:73:48:74:42:
2a:a3:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:06 2026 by rpki-client