
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86aec08-2f64-35ad-8197-6bb06358292e.roa
File: c86aec08-2f64-35ad-8197-6bb06358292e.roa (raw, json)
Hash identifier: +mFdXAgAEq5XymT3u9fAeBsM2tE4gmKyA4Dcw+BJeDQ=
Subject key identifier: A8:79:94:4F:4E:12:3C:14:2E:16:3C:63:70:47:FE:18:F7:3B:38:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D81006BB08C7877D11435E180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86aec08-2f64-35ad-8197-6bb06358292e.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 7725
IP address blocks: 2603:3001:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:00:6b:b0:8c:78:77:d1:14:35:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=bf7db447-517b-4527-a2fa-d523e0408c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:45:10:68:fa:4f:73:89:3d:a1:75:d9:6f:
e0:4e:f6:10:61:4a:f9:0d:10:30:8f:1e:4a:5f:97:
ff:b9:22:bf:a8:d7:0e:ca:84:e6:a8:ea:c0:68:74:
aa:89:84:90:41:5c:a9:52:f1:87:07:03:39:f5:a3:
bd:a2:44:81:2a:12:8c:bf:42:3d:2c:ff:90:67:a7:
bf:38:ec:96:91:f9:11:4d:f0:eb:55:ca:5a:d4:3c:
44:82:21:59:1e:ef:9c:3c:eb:33:d5:62:fd:ba:66:
b6:88:d9:fd:c7:ef:0a:06:0a:a9:75:4e:71:f9:f6:
ec:3b:4a:bd:87:9e:f2:3b:b1:fb:a0:b0:56:ed:f3:
e8:f6:ce:0d:93:ca:2d:06:c8:0c:43:76:d1:68:e0:
4c:e6:d0:58:bd:d9:1e:02:80:d5:b9:4a:d0:68:7a:
09:1f:54:91:c8:c9:3d:7d:21:03:ae:d8:cb:e6:d3:
18:8a:1d:40:ea:6a:cf:ba:f4:d0:75:c3:9a:fc:93:
a3:62:84:4f:18:f3:13:0c:01:7e:ab:21:e3:4f:fa:
67:bc:d2:60:36:07:bf:1b:ca:06:a4:06:8c:f5:2f:
3e:47:93:27:6c:0e:a0:75:2a:aa:1f:bf:f6:f7:07:
8a:fe:a8:5d:2f:29:9e:83:50:64:c2:4a:18:1b:0a:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:94:4F:4E:12:3C:14:2E:16:3C:63:70:47:FE:18:F7:3B:38:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86aec08-2f64-35ad-8197-6bb06358292e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3001:400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:09:e8:03:1e:94:ec:5c:a1:e7:ad:58:62:ad:47:06:0a:06:
94:7f:30:62:05:db:9a:c8:aa:06:eb:14:54:24:81:a1:75:cd:
f7:da:ed:16:06:fe:ec:86:80:5c:f9:7b:ce:72:eb:3b:00:ec:
7e:55:87:2b:76:57:b8:32:7f:5a:a3:47:2c:24:4f:dd:61:40:
eb:43:20:40:a7:a6:7e:82:14:7b:50:51:1b:88:ac:89:6e:d3:
19:4d:9e:5f:c0:80:25:62:e0:a1:53:94:c7:af:e1:2f:65:cd:
3e:94:d4:37:8b:f6:ea:aa:2c:45:4f:d1:1e:ef:98:d4:13:e4:
5f:41:f7:88:39:71:9f:a7:96:92:4a:37:53:80:bb:78:0e:f2:
d2:43:5d:f1:99:8d:66:fa:0e:74:b7:77:82:b1:58:38:3d:42:
d4:b5:6f:fb:84:98:29:bf:eb:b2:69:89:12:5b:39:ef:87:57:
74:b1:4e:c1:f6:8d:b4:c0:41:46:33:6e:8a:e9:94:74:c8:36:
e6:d6:9a:54:86:db:15:a9:ad:8c:e7:03:a6:dc:43:89:e9:38:
45:1b:97:21:82:f7:07:83:08:dd:4a:11:b9:20:4f:a0:e3:d4:
12:86:9f:26:18:4b:51:36:81:25:c6:3d:66:32:31:8b:1b:28:
8c:2e:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:53 2026 by rpki-client