
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a3b20d-8391-3e52-a543-d18f031790df.roa
File: c7a3b20d-8391-3e52-a543-d18f031790df.roa (raw, json)
Hash identifier: UjAn0GTdlViCVOTMAIqPlrcinurVHxsnSkJHWfrww3s=
Subject key identifier: 02:E4:82:BC:77:D2:CD:CA:96:7E:A6:7D:10:9B:DA:39:E3:DB:56:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B6F7DC2A572323C8E47C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a3b20d-8391-3e52-a543-d18f031790df.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 2603:300a:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:6f:7d:c2:a5:72:32:3c:8e:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=2f9946e4-0c42-4069-bdbc-7e1fe7d69743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:a8:01:76:dd:d5:bb:78:d4:bf:34:7d:dd:
bf:17:eb:26:61:a6:a2:74:de:62:56:f4:d8:54:64:
a4:dd:4a:b9:46:b4:f9:11:63:1f:72:00:c9:00:73:
0a:2a:d0:20:ab:26:65:82:8e:f0:7e:ff:25:7f:2f:
80:b7:2f:f4:ab:dc:4f:77:1c:33:1d:8c:13:5d:62:
3a:79:7b:b6:e0:9b:87:f3:4b:09:30:81:36:19:72:
84:0e:a9:e5:62:53:28:ef:c3:fa:dd:c4:c3:28:68:
92:ea:57:51:dc:21:a0:d1:05:71:85:bd:52:5a:89:
9c:7e:b7:70:4b:76:77:d4:90:1e:0e:ae:d8:7d:79:
18:9d:db:01:d8:59:aa:50:85:4c:c1:db:2a:56:0b:
3e:13:72:46:a9:10:40:33:ac:74:67:cd:18:3d:f8:
b4:e6:68:c4:fc:01:3b:1b:06:ee:3d:a9:8c:3b:4f:
9f:af:1c:99:b2:c3:72:ad:34:94:ee:ec:13:a1:64:
b5:db:5a:91:14:08:16:ad:c2:07:9d:cc:af:d2:4b:
9b:cc:bc:ab:99:36:65:79:1f:6b:80:1b:5b:3c:09:
4c:b0:b3:c7:0c:6b:ca:39:f1:02:22:b8:21:2a:99:
02:6a:b4:1b:e5:e1:b3:b6:97:0a:86:bf:7c:b0:b0:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:82:BC:77:D2:CD:CA:96:7E:A6:7D:10:9B:DA:39:E3:DB:56:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a3b20d-8391-3e52-a543-d18f031790df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300a:900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:87:82:cb:55:8d:a5:13:bf:05:60:f6:d4:fe:72:5c:4c:ac:
cb:03:aa:40:f3:bf:56:bd:9b:08:df:ff:33:1d:5d:8e:49:f1:
6c:1a:ae:36:6f:dd:56:b4:c3:67:36:2a:7e:88:cd:89:a6:20:
bf:11:9d:eb:5c:2e:c2:85:91:e5:e2:79:f4:d4:f6:f3:5b:bb:
69:d1:8d:be:5b:ba:24:46:56:b4:51:3a:c6:5f:f4:d8:ad:00:
e2:53:98:0a:16:b6:4c:b2:90:c6:b6:b3:13:21:46:23:a3:c6:
96:36:cf:72:28:7b:cd:4d:ef:0e:8e:c8:31:2c:18:46:d0:9f:
fd:ba:3f:74:6f:7b:ae:3c:15:92:29:01:20:d1:9d:32:a9:95:
93:8a:9d:0c:19:32:e3:27:3d:81:2f:c4:ad:d0:a0:db:00:57:
be:81:a4:e9:fa:a5:63:db:1d:45:ef:04:66:7d:b8:51:02:d0:
5b:9c:da:db:b9:7d:21:a0:0b:ad:cf:2e:03:52:69:9d:d4:d5:
40:fa:ce:59:85:60:da:51:25:b4:90:e3:42:43:0d:37:78:0d:
de:13:4a:41:60:cc:c7:76:f8:72:d8:07:73:f3:b2:aa:a1:31:
66:ee:b8:22:89:31:ad:87:7d:a1:f2:ab:1d:31:90:3f:0a:f8:
49:a5:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:18 2026 by rpki-client