
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f6864a-dd67-3db3-861c-301790d4770a.roa
File: d3f6864a-dd67-3db3-861c-301790d4770a.roa (raw, json)
Hash identifier: TiILtMmVfAIid0f5vFbmrgVcTnxOP+ZuoxQB6XVGruw=
Subject key identifier: A8:94:08:DF:B5:1D:C8:B2:A4:77:5F:C6:88:D8:00:CB:68:9E:59:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE86543F4B8BAF52F9281F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f6864a-dd67-3db3-861c-301790d4770a.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33668
IP address blocks: 2001:559:791::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:54:3f:4b:8b:af:52:f9:28:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=2aaaf372-dd81-4f9b-b7ac-bf823071416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:43:2a:a9:5a:4f:12:df:80:af:64:93:cb:
cd:c1:3b:7d:1d:cc:8c:89:f2:c1:6e:7f:ac:5a:df:
8e:8d:46:df:02:23:7a:ac:88:99:e2:a5:19:cc:e8:
eb:30:81:04:9d:b6:32:fe:57:82:2f:f2:4b:d3:70:
02:71:4d:c2:f5:88:52:c2:ec:10:e6:13:5f:e3:f2:
95:6d:fd:c3:d3:51:4d:ed:73:e9:6f:c9:59:4b:1e:
73:1a:bd:e1:02:65:ab:fb:d9:bb:07:d5:a8:81:6e:
a7:31:3a:76:d6:df:59:83:c7:be:1f:33:64:8b:a3:
14:68:99:a6:83:38:da:ec:12:60:d2:a5:3d:3c:a3:
28:56:f5:84:ee:22:ee:04:5a:33:c9:9c:28:79:65:
20:c3:97:00:a8:f8:5a:ef:97:b7:62:ba:48:f7:92:
52:f9:a1:b8:34:a1:48:75:09:93:af:14:84:bf:83:
ad:62:fe:21:f1:3b:29:d8:5d:ab:e8:c8:c0:2f:5e:
a7:7f:58:29:88:8d:01:76:9d:94:86:9c:53:6d:56:
e3:87:27:0d:98:08:34:c7:76:48:9a:18:c9:e7:9b:
33:aa:18:91:b2:25:8b:ec:2a:a5:2c:ce:f4:dc:25:
90:55:65:44:8d:2e:de:54:46:1c:93:ea:ee:af:50:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:08:DF:B5:1D:C8:B2:A4:77:5F:C6:88:D8:00:CB:68:9E:59:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f6864a-dd67-3db3-861c-301790d4770a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:791::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:4a:e2:cb:91:5d:52:06:b7:2d:b5:4a:b8:d8:3a:29:31:f3:
e4:db:04:ab:53:d6:61:ae:e5:a8:9f:68:b7:c2:a9:95:1a:e0:
27:22:9e:de:c5:73:85:3b:c3:39:28:1f:66:14:ce:ef:c1:f1:
7a:a5:1b:d0:0d:1e:df:71:95:dc:ff:1f:f3:81:51:3b:4f:b3:
f7:b4:9d:b3:8f:40:39:90:0d:31:70:e4:67:26:62:79:7f:29:
07:21:8a:bb:03:d2:22:48:80:11:93:83:a1:45:ef:e6:55:14:
88:90:f0:37:a2:db:9d:8f:73:3e:a6:6a:85:2d:42:36:87:74:
d5:fe:70:de:28:50:c9:44:ed:25:94:e1:03:72:f2:fb:9c:fb:
c8:8e:ee:da:f0:40:ab:c4:28:81:10:19:2b:3c:2c:6d:82:a9:
39:d4:51:65:d9:50:6a:9e:0f:a5:5d:9e:70:e4:34:a0:1d:da:
5e:57:a9:bb:36:c9:d8:f6:4f:f5:81:ab:43:d6:a4:84:86:66:
22:43:3d:d5:b3:6e:1b:51:5b:c1:33:e9:12:cd:e1:91:a6:2e:
ea:b8:ce:c6:31:86:fc:ce:3b:7f:ad:02:83:b0:2b:67:79:37:
2a:fc:bb:66:c8:19:88:58:4c:30:22:a6:56:24:bb:85:9f:ab:
12:52:e2:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehlQ/S4uvUvkoH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MmFhYWYzNzItZGQ4MS00ZjliLWI3YWMtYmY4MjMwNzE0MTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxdDKqlaTxLfgK9kk8vNwTt9HcyMifLBbn+s
Wt+OjUbfAiN6rIiZ4qUZzOjrMIEEnbYy/leCL/JL03ACcU3C9YhSwuwQ5hNf4/KV
bf3D01FN7XPpb8lZSx5zGr3hAmWr+9m7B9WogW6nMTp21t9Zg8e+HzNki6MUaJmm
gzja7BJg0qU9PKMoVvWE7iLuBFozyZwoeWUgw5cAqPha75e3YrpI95JS+aG4NKFI
dQmTrxSEv4OtYv4h8Tsp2F2r6MjAL16nf1gpiI0Bdp2UhpxTbVbjhycNmAg0x3ZI
mhjJ55szqhiRsiWL7CqlLM703CWQVWVEjS7eVEYck+rur1AFsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKiUCN+1HciypHdfxojYAMtonlnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNmNjg2NGEtZGQ2Ny0z
ZGIzLTg2MWMtMzAxNzkwZDQ3NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIFK4suRXVIGty21SrjYOikx8+TbBKtT1mGu5aifaLfCqZUa4Cci
nt7Fc4U7wzkoH2YUzu/B8XqlG9ANHt9xldz/H/OBUTtPs/e0nbOPQDmQDTFw5Gcm
Ynl/KQchirsD0iJIgBGTg6FF7+ZVFIiQ8Dei252Pcz6maoUtQjaHdNX+cN4oUMlE
7SWU4QNy8vuc+8iO7trwQKvEKIEQGSs8LG2CqTnUUWXZUGqeD6VdnnDkNKAd2l5X
qbs2ydj2T/WBq0PWpISGZiJDPdWzbhtRW8Ez6RLN4ZGmLuq4zsYxhvzOO3+tAoOw
K2d5Nyr8u2bIGYhYTDAiplYku4WfqxJS4n8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:36 2026 by rpki-client