
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfe4414c-90c2-33e6-ab7b-d3d022cd6902.roa
File: cfe4414c-90c2-33e6-ab7b-d3d022cd6902.roa (raw, json)
Hash identifier: ENzkHeiBHEJ+Qu81Li0w9xgN+ZfZgY9Nnzqa8R6m8Os=
Subject key identifier: 96:92:62:A1:25:71:48:22:22:79:8C:A2:06:8F:8A:5C:3E:D6:BC:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57AB0233F9B22ADB6C74E2
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfe4414c-90c2-33e6-ab7b-d3d022cd6902.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 2601:84:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:ab:02:33:f9:b2:2a:db:6c:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9e145a0f-a4f1-411d-a25a-c3e77565763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:2f:5f:a8:2c:ca:f9:a5:67:13:b6:f4:9c:
31:0b:60:cb:1d:27:84:3a:57:5b:fe:ee:24:f5:31:
ff:aa:d9:a2:5a:f3:dc:35:a7:47:5d:a9:35:48:6e:
fc:ff:7b:15:06:2c:24:a2:ff:dc:42:8d:fb:cc:68:
3d:44:41:da:df:c0:36:f2:8f:cf:4f:2d:e6:c1:a2:
94:30:73:5e:af:67:03:e8:c5:aa:96:74:d2:f8:8f:
ca:98:ff:60:c5:7a:c7:c8:10:7f:68:45:d8:e1:c2:
4a:fd:0d:89:fa:46:a1:3a:72:1f:78:b4:bb:b6:3b:
4e:78:ca:90:13:fd:b1:c5:a3:2a:8b:a8:03:c3:f1:
2a:c0:25:49:9e:e8:8d:c2:c6:e2:3c:97:cf:68:18:
71:b6:d1:da:9b:51:fd:42:0a:d5:5b:98:94:d0:bd:
34:5f:f7:9e:a2:4a:58:15:5a:bf:2c:da:ba:1a:5c:
47:a3:77:0e:fb:4d:f9:bc:11:c6:48:94:ce:59:7b:
ba:72:54:c6:4f:e3:38:3b:55:5f:35:c3:58:ef:4e:
12:7a:61:67:47:24:4e:bd:e7:98:52:81:eb:98:a2:
a1:27:3a:38:c4:94:23:cd:73:9b:7e:23:4f:cb:7a:
5f:f1:13:f2:93:b7:1e:c1:81:f2:6c:69:10:86:68:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:92:62:A1:25:71:48:22:22:79:8C:A2:06:8F:8A:5C:3E:D6:BC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfe4414c-90c2-33e6-ab7b-d3d022cd6902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:84:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:f1:cd:af:3d:7c:5b:53:0f:8d:47:8e:0f:6c:9e:e4:a9:6c:
5e:2a:83:01:c8:cf:87:e6:50:b2:e3:ad:ed:c8:72:71:4d:7a:
4a:9c:63:80:fe:43:b8:6e:8e:5a:6e:09:62:f8:12:55:af:b6:
02:2e:a0:00:5e:be:dc:9e:ab:a6:64:5f:28:65:e0:2a:45:08:
87:6c:a9:e0:c2:27:0c:71:df:92:29:6c:b0:dd:ae:39:9d:c8:
3c:d3:a2:c6:b2:21:bf:d2:82:4f:40:ab:4d:f6:aa:16:c9:d9:
9b:23:f0:91:44:92:91:a1:bd:cd:cf:5d:d8:91:e9:77:ac:4a:
01:47:9e:4d:19:69:60:71:32:38:99:72:e2:6d:2b:b0:62:ec:
e2:05:aa:25:1b:92:d3:36:24:f7:64:4a:c2:ff:41:86:4d:80:
a3:c2:50:56:09:3a:89:ff:9e:e1:d5:2b:30:16:0d:d2:3e:40:
9e:68:3d:ce:c4:f1:26:fd:c6:df:4b:f4:b5:70:af:72:45:99:
3f:a3:a0:f2:0d:6d:12:37:83:2a:84:ec:cd:c8:8b:9d:84:02:
dd:d8:2f:c6:4c:1b:ec:08:2d:ac:8a:a1:fb:ce:07:91:e8:d8:
d2:16:c2:97:fa:43:d6:b3:a2:24:f6:59:3f:98:5c:72:9f:84:
2a:bd:fe:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV6sCM/myKttsdOIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OWUxNDVhMGYtYTRmMS00MTFkLWEyNWEtYzNlNzc1NjU3NjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkvX6gsyvmlZxO29JwxC2DLHSeEOldb/u4k
9TH/qtmiWvPcNadHXak1SG78/3sVBiwkov/cQo37zGg9REHa38A28o/PTy3mwaKU
MHNer2cD6MWqlnTS+I/KmP9gxXrHyBB/aEXY4cJK/Q2J+kahOnIfeLS7tjtOeMqQ
E/2xxaMqi6gDw/EqwCVJnuiNwsbiPJfPaBhxttHam1H9QgrVW5iU0L00X/eeokpY
FVq/LNq6GlxHo3cO+035vBHGSJTOWXu6clTGT+M4O1VfNcNY704SemFnRyROveeY
UoHrmKKhJzo4xJQjzXObfiNPy3pf8RPyk7cewYHybGkQhmj3xwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJaSYqElcUgiInmMogaPilw+1rxRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZlNDQxNGMtOTBjMi0z
M2U2LWFiN2ItZDNkMDIyY2Q2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAhMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADPHNrz18W1MPjUeOD2ye5KlsXiqDAcjPh+ZQsuOt7chycU16Spxj
gP5DuG6OWm4JYvgSVa+2Ai6gAF6+3J6rpmRfKGXgKkUIh2yp4MInDHHfkilssN2u
OZ3IPNOixrIhv9KCT0CrTfaqFsnZmyPwkUSSkaG9zc9d2JHpd6xKAUeeTRlpYHEy
OJly4m0rsGLs4gWqJRuS0zYk92RKwv9Bhk2Ao8JQVgk6if+e4dUrMBYN0j5Anmg9
zsTxJv3G30v0tXCvckWZP6Og8g1tEjeDKoTszciLnYQC3dgvxkwb7AgtrIqh+84H
kejY0hbCl/pD1rOiJPZZP5hccp+EKr3+ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:59 2026 by rpki-client