
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa
File: cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa (raw, json)
Hash identifier: +7EYkxjLRMNu+MLw0+ankrDOixBt7XuNmUfs49pLdic=
Subject key identifier: C3:C7:30:C0:62:D2:C2:C8:61:64:7A:DC:D6:79:59:FD:09:C5:0A:0A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862356C26EB01BF522202A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 7015
IP address blocks: 2601:191:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:35:6c:26:eb:01:bf:52:22:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=2f8764d9-0630-4cc0-84d9-ca2f801c90d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:c9:af:5f:57:97:06:25:ae:f8:34:33:42:
88:b8:fc:6d:69:8e:c5:4d:69:81:e9:9c:61:36:83:
01:01:72:a4:c0:c8:f9:2d:df:bc:64:d2:23:0c:e9:
c8:b6:66:1d:40:71:74:56:a0:e8:f8:57:bf:05:6b:
ab:1a:2c:0f:14:8b:5a:71:ec:2a:b6:b9:84:b5:2c:
cf:70:71:cf:d1:8e:60:24:03:90:94:e0:5d:ab:7c:
87:dc:22:33:de:b9:3b:28:cf:b1:04:1f:d3:51:33:
b7:6b:aa:20:ba:ab:43:82:fb:78:f0:76:9a:65:4b:
b5:20:43:ec:86:62:9f:a7:eb:75:4c:84:f3:26:83:
3a:15:f2:a7:31:7d:6b:1e:ef:0c:b0:03:cc:d2:57:
9c:18:29:b5:56:b2:74:d1:79:6d:91:42:bb:d7:78:
ce:48:b2:b6:5c:83:b5:0d:d2:36:89:40:c0:02:4d:
b6:b1:09:e8:41:4f:4f:f4:65:02:3a:d1:53:97:40:
78:83:ff:1d:53:98:6e:08:25:91:3d:43:95:4a:d3:
2e:f1:8b:06:c6:b8:24:b0:7c:3f:02:2c:d0:d2:f7:
db:2e:02:10:46:89:3d:09:46:a7:76:01:3c:24:fe:
3e:32:47:21:61:d4:9c:45:58:72:eb:11:2a:14:ef:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C7:30:C0:62:D2:C2:C8:61:64:7A:DC:D6:79:59:FD:09:C5:0A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:191:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:a3:aa:f5:28:95:77:f4:e4:58:91:22:47:db:c4:4d:6a:ec:
5b:30:dc:ce:47:00:f1:e8:86:b9:72:1a:b2:72:21:33:24:70:
cb:e8:cf:1b:06:01:b5:4b:6d:57:21:19:6e:0f:81:e8:d3:da:
17:5f:71:4f:ab:31:ac:3c:0f:5d:6a:62:a5:29:f4:c1:87:00:
4c:48:43:a8:8f:2b:bc:73:03:ec:37:33:3f:13:66:c2:76:d5:
f1:2a:01:09:e3:03:2f:86:d9:c5:9a:ee:37:75:b7:b3:0d:76:
26:f9:fc:8f:38:ab:4b:45:b6:f5:3b:25:8f:50:29:e0:4f:66:
d8:b7:d5:52:56:97:9d:56:96:fe:ea:98:db:ff:14:f7:cb:88:
fb:a6:5e:14:09:2b:48:94:c0:99:48:b4:6b:15:d6:c0:09:bf:
91:34:08:bf:2d:d0:b0:83:7f:52:64:57:3f:c8:c7:1c:b6:ed:
73:2c:8a:e9:96:5d:79:dc:43:5f:ad:10:d1:2a:47:97:19:28:
fa:9c:58:1f:89:e3:9b:9c:f5:73:f3:46:51:e0:a1:f6:c8:7c:
cd:9a:ae:52:54:fb:10:6c:27:e0:ae:0b:08:d3:ef:f9:f5:9c:
32:10:8b:ce:69:c3:91:22:99:be:18:aa:c0:db:49:d5:a0:de:
f9:e4:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:45:08 2026 by rpki-client