
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04e5900-289c-3887-9b46-6b3dfb0cdba7.roa
File: f04e5900-289c-3887-9b46-6b3dfb0cdba7.roa (raw, json)
Hash identifier: rEZb7iumbD2BMBHwswAWr8PEMwDT1jwlg3v4TfCw5N8=
Subject key identifier: 31:BB:6B:51:0C:C0:3E:E2:3D:91:83:1C:A3:CB:EF:62:4A:93:87:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4979F5B82DC6B711507D8F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04e5900-289c-3887-9b46-6b3dfb0cdba7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 2001:559:c3ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:79:f5:b8:2d:c6:b7:11:50:7d:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a42d464d-23bf-442c-a61a-4834a06368db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:3a:82:62:62:02:bc:6d:a5:37:38:5e:94:
b8:e8:bf:53:01:81:7c:fb:5a:d0:fd:2c:b4:64:a5:
55:3e:dc:fe:cc:2e:b3:65:d3:2e:01:e6:15:bd:3a:
f4:58:8e:dc:60:de:cd:7a:43:85:f8:64:04:af:da:
4c:e9:ea:07:62:21:9f:6d:20:01:1a:f1:16:a6:24:
cd:29:85:48:38:9b:73:34:66:55:d4:87:02:9d:e8:
4b:43:51:30:db:1c:50:ad:34:1b:d6:f0:dc:7e:5c:
74:4d:44:6f:11:8d:73:4e:ad:77:46:56:9a:00:37:
03:9c:7b:e3:bc:51:3e:7c:36:24:e9:95:4a:86:51:
71:81:8d:25:a3:1c:a4:57:14:83:63:4f:21:10:b1:
b3:45:bc:67:6b:e8:f1:5f:05:5d:9c:83:dd:79:b1:
b3:98:f9:a4:d6:f8:bd:03:c5:63:83:7e:8f:0e:ac:
92:c1:21:9a:80:3f:10:e7:7d:95:b9:18:9e:a0:3d:
ae:65:bf:0d:37:f9:cc:c4:fd:f5:7c:ac:6d:4d:12:
09:0d:97:1e:07:1f:f8:26:cd:21:66:7e:73:40:ec:
d3:41:ff:da:68:6e:52:f8:16:d2:8d:41:e3:07:45:
e5:81:60:a4:05:23:8f:36:f3:30:ce:6d:44:be:60:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:6B:51:0C:C0:3E:E2:3D:91:83:1C:A3:CB:EF:62:4A:93:87:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f04e5900-289c-3887-9b46-6b3dfb0cdba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3ba::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:33:f8:16:5a:7e:04:b2:b3:bf:ed:90:3b:c8:aa:f9:c4:8f:
09:2f:3b:7e:ac:0f:1f:56:96:96:5b:06:64:8e:d4:01:17:7f:
cf:d0:03:23:0d:7d:3d:b8:f9:65:48:79:36:5f:9e:4f:48:16:
00:a1:2a:5c:a9:14:6d:82:a2:e7:1e:8a:3a:46:7f:a2:c8:2c:
8b:91:37:c1:bb:16:4d:5e:08:75:e6:d3:89:df:02:fb:2e:3c:
bf:b9:62:72:fd:4b:c2:b7:ae:52:a8:7f:0a:59:0b:a0:5c:0f:
7c:b6:95:a3:21:08:2d:0d:9d:bd:9d:43:c4:a9:22:b4:5e:d2:
69:d5:f9:c6:8f:69:04:8f:44:71:66:ae:d2:03:d1:0d:cf:5e:
c9:74:ea:e1:7d:0a:f0:9e:67:78:43:97:bf:0c:24:a0:33:d7:
13:d2:63:13:ac:d8:58:b1:ea:8e:48:b4:66:39:c5:9d:a7:c9:
90:6d:22:c8:ce:d3:5b:60:d9:50:aa:db:2c:f4:d4:0d:64:d1:
88:31:54:b7:b8:80:a0:d7:af:b1:ed:4b:78:bf:db:38:7e:f0:
33:4a:42:a1:bc:16:b9:4c:33:cd:29:af:d0:0a:3c:ea:9c:e7:
19:b2:69:26:e3:35:01:7a:25:0b:79:98:ab:43:f0:2e:76:f3:
da:e8:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:21:40 2026 by rpki-client