
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5302a8d-f4a7-3d9e-a95d-4b482974f16f.roa
File: b5302a8d-f4a7-3d9e-a95d-4b482974f16f.roa (raw, json)
Hash identifier: QDbfOaZLRNAqWc1p7zT7u7o5zJjqCHTLTPJZlj5hqxU=
Subject key identifier: 86:67:8E:B5:FD:88:34:78:F4:B9:55:B5:50:C0:23:42:63:25:00:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57F968F5CFC48608DE14E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5302a8d-f4a7-3d9e-a95d-4b482974f16f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 2603:2800::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:f9:68:f5:cf:c4:86:08:de:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e693bc08-b28b-46b1-bff8-f9f101900949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:15:d3:0b:84:b5:a5:3e:e1:99:8c:b4:17:7c:
89:21:03:b3:8b:48:c3:02:03:17:aa:24:05:03:a6:
e6:63:1c:a4:9a:fa:99:7d:aa:db:97:28:c6:a6:d8:
1a:4e:f4:e7:bc:55:1c:d3:49:a6:08:a0:13:5b:c2:
b2:47:3d:57:bb:e6:53:dd:d0:c2:76:49:fa:5c:8d:
b1:f4:2a:30:cc:74:bb:fe:67:a8:8e:9d:27:31:db:
a3:ca:78:bc:a2:ed:4f:74:e0:90:77:2c:d6:63:f8:
6a:5b:2a:71:f0:1e:ba:b2:a3:8d:8b:9d:71:00:2f:
58:16:77:8a:2d:ef:77:c4:4a:1a:23:a3:e7:86:28:
6f:a1:f5:11:76:34:21:89:4a:84:6b:b5:9d:0c:c0:
8f:4d:bd:08:16:37:5c:ca:b2:e5:4c:cc:9b:9e:22:
c6:6d:c0:6d:28:01:ee:c0:74:d4:e4:06:2c:b9:06:
21:fd:b8:95:0b:fc:88:27:1e:57:ba:a7:54:5a:20:
73:09:0f:04:27:5b:e4:af:76:4c:9e:65:9f:ca:9b:
17:25:6b:2b:36:e5:76:b7:3e:17:ab:37:6f:91:c5:
c8:66:ce:a1:0d:0e:0d:60:9a:6a:b1:eb:c0:11:2e:
26:1b:ad:4d:dd:dd:85:da:17:ef:c8:bd:cc:24:d0:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:8E:B5:FD:88:34:78:F4:B9:55:B5:50:C0:23:42:63:25:00:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5302a8d-f4a7-3d9e-a95d-4b482974f16f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2800::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:20:ae:1a:67:2f:fe:f0:8a:0e:25:f3:d9:f2:df:ed:4c:1f:
2b:e5:48:04:3d:e6:14:86:89:f0:67:45:3e:8c:02:1e:55:76:
a5:8b:6d:1c:95:98:29:7c:9c:da:ed:b0:6b:6b:3d:2d:b2:d0:
00:93:ef:20:a2:c5:bd:b4:02:66:66:8a:7a:f7:05:96:27:2e:
0f:79:0f:da:da:15:5c:59:97:6e:0d:86:7e:40:57:83:1b:46:
e0:7e:7b:e3:2a:a5:f3:e4:05:da:f0:01:28:fb:5c:3b:24:6d:
d2:3f:3b:da:6a:05:26:25:15:53:42:33:f2:b5:d9:65:4b:fe:
02:e6:d9:be:59:9e:06:a6:37:fc:3e:fe:b8:72:cc:c3:5d:9d:
71:70:79:82:ae:64:c4:fb:39:ef:63:d3:9c:18:bf:10:6a:8b:
bd:08:c8:38:3b:bf:bc:8b:92:5a:b5:65:7e:ea:1c:9b:20:0c:
1b:1c:a2:63:b6:e6:ea:62:46:aa:9a:d5:e0:90:57:ef:66:18:
e0:04:1e:b9:c7:06:28:62:82:6c:58:cc:aa:77:4b:72:94:e5:
c4:06:68:8d:16:c3:e4:3c:2f:09:8b:53:ac:8f:2e:8b:2a:64:
0d:ba:c8:d7:ac:6c:99:59:a8:3e:ab:a7:e6:22:ce:c1:43:dd:
0d:8b:4d:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV/lo9c/EhgjeFOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTY5M2JjMDgtYjI4Yi00NmIxLWJmZjgtZjlmMTAxOTAwOTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhXTC4S1pT7hmYy0F3yJIQOzi0jDAgMXqiQF
A6bmYxykmvqZfarblyjGptgaTvTnvFUc00mmCKATW8KyRz1Xu+ZT3dDCdkn6XI2x
9CowzHS7/meojp0nMdujyni8ou1PdOCQdyzWY/hqWypx8B66sqONi51xAC9YFneK
Le93xEoaI6PnhihvofURdjQhiUqEa7WdDMCPTb0IFjdcyrLlTMybniLGbcBtKAHu
wHTU5AYsuQYh/biVC/yIJx5XuqdUWiBzCQ8EJ1vkr3ZMnmWfypsXJWsrNuV2tz4X
qzdvkcXIZs6hDQ4NYJpqsevAES4mG61N3d2F2hfvyL3MJNC1AQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIZnjrX9iDR49LlVtVDAI0JjJQCEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjUzMDJhOGQtZjRhNy0z
ZDllLWE5NWQtNGI0ODI5NzRmMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMoAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZCCuGmcv/vCKDiXz2fLf7UwfK+VIBD3mFIaJ8GdFPowCHlV2pYtt
HJWYKXyc2u2wa2s9LbLQAJPvIKLFvbQCZmaKevcFlicuD3kP2toVXFmXbg2GfkBX
gxtG4H574yql8+QF2vABKPtcOyRt0j872moFJiUVU0Iz8rXZZUv+AubZvlmeBqY3
/D7+uHLMw12dcXB5gq5kxPs572PTnBi/EGqLvQjIODu/vIuSWrVlfuocmyAMGxyi
Y7bm6mJGqprV4JBX72YY4AQeuccGKGKCbFjMqndLcpTlxAZojRbD5DwvCYtTrI8u
iypkDbrI16xsmVmoPqun5iLOwUPdDYtNMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:48:46 2026 by rpki-client