
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa
File: d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa (raw, json)
Hash identifier: tCM6FHDa67CCOX3kMsW1p/hmDyL9UY4pWW33ADE8y08=
Subject key identifier: DD:6F:F4:4B:2F:AC:25:76:8B:01:B4:95:06:6F:7F:2F:EC:80:3D:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE91AFF46E5BA2861AABB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 7922
IP address blocks: 2603:2000::/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:1a:ff:46:e5:ba:28:61:aa:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=66237feb-a82d-4a8b-bcaa-8ebfea4d9f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:60:a5:f3:fa:55:22:7a:ba:83:39:6c:95:
e2:f5:b9:78:79:f0:e3:23:f9:4e:51:22:cd:1c:46:
a5:14:86:b4:62:f8:d3:13:2d:b2:94:1a:6e:f7:9c:
3a:eb:24:29:93:a9:e3:5a:ec:4d:c7:90:04:8e:f6:
ab:29:ad:40:79:2a:61:1b:98:9b:dd:94:c7:5b:c0:
de:5a:58:ed:30:4e:ae:44:8a:0c:63:52:1a:7c:64:
35:79:84:f9:5f:f6:42:7e:c6:a6:71:5b:4a:77:08:
41:5e:ce:be:b8:4d:f6:67:a9:00:ff:68:0a:63:46:
6e:cf:14:67:7d:70:ee:92:32:ba:19:90:5b:b7:cc:
3c:25:6b:47:0c:27:57:35:7e:ef:a9:71:ff:10:6f:
8c:56:04:8c:85:6d:82:ab:d2:2d:f6:e4:80:25:ed:
01:4e:24:78:ed:e9:a6:2b:b9:4e:e5:bf:6e:62:ff:
17:5a:0b:a8:e7:ac:f4:27:ce:2c:c2:b9:04:49:0a:
e5:39:60:07:ac:80:99:f1:d5:66:82:a3:ca:87:1b:
0f:48:61:23:80:de:f8:43:f0:19:9d:1f:5c:3e:b9:
69:ab:e3:ed:cf:57:aa:93:2c:4f:c6:0e:4e:a5:52:
cc:25:1f:97:b9:a0:92:9a:1c:dc:b9:8e:07:6b:6e:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6F:F4:4B:2F:AC:25:76:8B:01:B4:95:06:6F:7F:2F:EC:80:3D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2000::/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:1d:1a:17:17:bf:f7:25:ad:04:93:b2:ec:34:c9:9c:fb:9f:
45:35:54:3e:43:15:fb:00:79:08:08:cc:da:2d:01:c2:f8:0a:
47:ed:4c:87:3e:ab:61:79:cc:e5:be:ca:3d:e9:2b:6c:01:93:
2e:ea:7e:14:f6:04:f6:e9:d0:fa:6d:65:91:70:6f:ec:57:68:
26:e9:b4:67:1f:6f:81:8c:b7:72:d2:56:20:33:9e:7e:fc:8d:
5c:37:0d:8c:54:ed:52:ba:41:52:7d:ae:14:6a:ff:63:cf:92:
e4:e9:81:c7:7a:77:fd:ac:f6:78:35:8b:9e:d6:0a:20:76:61:
39:d3:3e:d8:11:74:b7:df:5a:f2:6c:6f:c1:71:59:0f:ba:55:
6a:ad:7f:65:21:e9:70:dd:65:10:08:5e:e4:9a:8c:37:e2:3f:
43:71:37:32:d2:44:76:1b:bb:41:70:80:70:b5:03:7d:9d:d0:
45:de:b9:48:35:29:52:95:e8:c9:17:96:5e:f8:87:20:02:2e:
db:2d:ad:1a:ab:af:0f:14:20:6d:7a:7b:1a:fb:f0:96:cd:6b:
14:0a:b1:6c:ba:3d:03:99:c9:49:3c:33:1f:d6:c2:52:07:b9:
f9:87:de:80:61:44:6e:c2:fe:ab:fd:1f:7a:85:a1:1a:d8:3c:
49:da:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:07 2026 by rpki-client