
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa
File: cfd0de8a-3248-3402-ac95-313029333991.roa (raw, json)
Hash identifier: L6ZmtzFeS8sWwvIHjJ1bZUVMWeHAYLaCayJ5sJ/5FJY=
Subject key identifier: A4:62:B2:58:37:B5:CC:FA:D6:C0:44:F0:03:60:81:2B:D2:8B:9C:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D5243997D2E769B99B1B5BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22258
IP address blocks: 2603:3014:2500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:99:7d:2e:76:9b:99:b1:b5:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=bdd20513-7f20-48e9-89fc-88a31785d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:16:37:07:eb:e3:1e:7a:10:4d:90:29:ea:
a9:da:7b:7f:48:c1:92:b7:77:ca:bf:7f:ce:e5:af:
e4:3a:e0:8d:05:a9:f1:8e:f9:2b:a8:3f:c2:f2:5f:
7d:6f:38:68:f9:14:3b:1c:41:f2:d7:33:43:70:80:
4a:1b:30:1a:71:cb:25:f7:bf:37:4c:35:70:f8:5d:
0d:33:c9:49:d2:76:e1:cb:a0:99:b8:97:3d:f6:d2:
0d:0b:47:d3:80:3a:5f:da:47:46:e3:25:3b:13:46:
d5:17:06:d3:e1:8b:dd:3a:58:3e:28:b2:e9:6e:db:
1e:32:9c:73:c5:d0:07:34:68:fc:e0:20:f0:56:8b:
13:fe:12:7d:57:70:55:88:5a:fc:a6:c9:cb:8a:72:
81:09:67:ea:0c:ea:e3:09:e3:bf:ee:fe:07:59:8d:
1d:3c:c0:e3:91:7f:4d:9f:be:1b:3e:ce:e9:8c:7a:
23:e7:5e:a1:9f:92:79:4b:3c:01:c4:79:ab:96:fb:
d5:e9:d9:3d:49:77:ff:ee:3a:d2:16:1f:02:33:44:
96:99:a9:50:bb:d6:b5:20:45:b2:5b:61:05:ed:c9:
c4:35:c2:9a:88:5b:e7:f6:33:e2:17:b6:18:84:72:
7d:99:a9:9d:63:2e:0a:b7:17:e1:8c:6c:8d:41:c8:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:B2:58:37:B5:CC:FA:D6:C0:44:F0:03:60:81:2B:D2:8B:9C:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3014:2500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:46:9f:46:ec:d3:29:19:a3:f4:e9:ee:b5:6c:0d:21:d6:ac:
51:1f:b2:aa:b8:42:c1:15:db:ae:dd:f1:b8:1c:0c:36:c6:11:
d6:e7:ca:f2:ae:fc:00:fb:04:54:04:da:80:12:35:6e:4f:7a:
9e:cb:7a:db:75:00:83:c9:15:11:eb:0b:1e:d9:3f:0c:8c:fd:
85:80:3c:64:36:c0:a6:d6:b0:2e:f5:7f:8c:3b:1f:78:6d:f4:
6a:6e:00:c1:99:d7:ce:af:4b:ee:e8:68:11:52:f9:55:72:26:
87:9b:21:1d:d5:dc:bc:5e:62:eb:6a:db:50:4f:52:90:60:a1:
43:37:03:55:d9:53:ad:95:36:10:28:02:96:69:6e:c8:b0:56:
8b:f6:d5:6d:e5:da:1b:9e:b2:4d:c1:22:bc:29:c8:9b:a8:79:
af:46:c3:27:69:f7:37:c9:d3:86:f6:49:cf:81:aa:15:4c:fc:
2e:91:97:e8:96:51:c9:39:ec:05:b5:9b:3a:d8:22:cd:59:ee:
c0:eb:8c:f5:8c:38:f4:f1:cf:81:77:85:f1:56:79:4c:a2:a4:
61:a5:b9:0f:4b:a4:d9:a7:93:19:06:ac:94:77:80:11:32:b1:
51:92:73:0b:c2:a6:1b:ab:9d:7f:d1:ad:d8:c2:8b:d8:8e:00:
22:2b:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:40 2026 by rpki-client