
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa
File: dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa (raw, json)
Hash identifier: xtRB+L6GCxvsF1WfW74MHO4bkiEw72+ArQvlSN1pBIU=
Subject key identifier: 43:25:FF:ED:B6:64:0B:E5:78:3D:E4:7E:18:AF:BF:57:A9:D3:B8:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49822A26C30D9E3DFE2B3780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 2001:559:3ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:2a:26:c3:0d:9e:3d:fe:2b:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1c5a40da-2faa-44e6-b726-dfb59ca4fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:6c:cc:87:fa:79:08:06:a6:3b:08:3c:c7:
e4:2d:9e:2e:05:04:97:09:ae:76:53:eb:fd:a0:53:
3c:8e:01:ac:e7:40:da:60:4e:48:f0:c0:10:62:df:
1d:7b:4b:02:1e:99:97:0b:93:9e:f4:3d:5c:a1:1b:
0a:1b:a8:6a:35:a8:0e:ac:de:11:bd:1c:18:56:73:
f7:74:1a:ed:71:f5:b3:8f:9c:9f:87:0b:61:f7:a0:
1b:6d:cc:b1:2b:c8:78:78:59:bd:fd:e1:c4:64:70:
cc:17:50:89:50:11:51:e5:0c:33:9c:28:7c:f3:8a:
76:70:7e:f9:9b:4c:3c:df:79:12:84:c4:d2:36:ed:
1d:ae:77:0b:cd:ca:72:04:a7:e7:ad:84:c9:84:69:
79:15:da:08:c3:b9:10:3f:21:29:1d:60:2c:b7:ed:
3e:d6:57:99:63:08:27:e3:b2:6e:3b:80:28:fc:93:
97:ea:5e:17:ee:a1:11:2d:13:47:da:06:78:4a:e8:
e2:83:00:31:fe:cf:c3:ab:1b:e1:d4:04:e2:20:f0:
6e:10:29:8d:49:1b:39:2b:f1:19:86:0e:e1:ff:e8:
77:c1:d4:49:af:b9:98:43:10:12:73:80:92:52:58:
73:3b:68:b1:3b:e4:2a:78:3a:5b:08:18:dd:87:a7:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:FF:ED:B6:64:0B:E5:78:3D:E4:7E:18:AF:BF:57:A9:D3:B8:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:3ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e8:97:0e:bc:d8:15:cd:14:ad:ef:a9:be:dc:65:e1:a4:2d:
47:4d:6c:a2:9f:78:af:be:4b:c0:c6:1e:dc:0c:dc:30:ff:dd:
45:c8:b1:b9:fc:99:f5:d0:26:14:de:d8:9b:83:04:0d:a5:fb:
85:38:d5:e1:94:b8:29:bd:39:7d:44:f6:f4:3b:16:85:60:a8:
76:3d:dc:d3:9b:5d:e6:e6:b7:cd:6b:3b:ad:3c:47:6f:03:1d:
c5:aa:b5:4d:b0:6d:29:41:c8:35:8e:e1:97:a2:74:af:5f:c5:
9a:60:03:9b:88:54:b4:a7:25:99:2e:65:90:80:46:e5:e5:d2:
30:a4:37:de:0d:18:9d:7b:10:02:3e:12:f8:74:fb:69:d4:50:
61:01:12:4d:ff:3c:99:c4:3b:c7:3b:4a:34:70:2b:7e:f2:a9:
5e:d0:7d:f4:96:a5:be:3e:bb:8f:cf:74:02:6c:fc:6a:13:7f:
c8:42:36:2c:bc:1a:94:4a:6b:77:e3:be:8b:88:9e:9b:77:c7:
70:fc:f8:59:79:3f:dc:c1:e8:b7:64:67:40:de:fe:76:a7:01:
55:53:d0:2c:a0:6d:ad:29:47:e8:44:65:b0:32:45:47:78:c9:
af:c9:14:25:b0:5f:d0:04:02:29:7f:af:54:4a:7e:ec:76:81:
e5:f1:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:37:53 2026 by rpki-client