
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa
File: 169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa (raw, json)
Hash identifier: BkWKQ2QFT69EnKiTAlQGV+WDUGIYJAhYevacXMjW0L8=
Subject key identifier: 37:F2:E4:44:BE:ED:2C:19:0A:94:51:F2:67:53:37:87:34:1E:64:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4982AC994631C6C7DEC3B760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2001:559:8765::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:ac:99:46:31:c6:c7:de:c3:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4717a2b8-c15a-4655-b9b3-7aa577282040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:d0:f4:52:d4:75:a3:5e:6b:5d:b4:34:86:
8f:3a:44:c4:a9:ac:84:3d:d2:37:91:58:a5:b1:52:
ce:25:26:37:4f:01:6c:77:a5:27:78:aa:8d:96:5b:
42:10:16:49:1c:cf:7b:c3:34:9b:0a:c9:f2:5a:74:
55:dc:da:5e:00:03:cb:4e:15:03:83:5d:40:4d:89:
83:c8:e5:fe:e6:83:9d:45:a0:1c:3e:12:4f:20:03:
33:53:cd:ce:1f:60:de:a8:9d:74:50:e0:6b:59:e6:
4f:c9:c4:16:de:69:4b:de:4c:88:2c:1e:f1:db:49:
e7:2d:b5:7e:f4:b7:76:55:69:bf:f2:33:e0:80:13:
ef:ca:d3:ca:f8:8e:33:76:9c:39:82:c8:84:a9:a2:
84:1b:16:8a:da:8b:44:3f:86:03:ec:3a:cf:ea:cb:
6d:f1:67:19:85:43:45:94:60:74:e8:36:98:a2:97:
93:1d:47:8f:88:bb:a0:3b:7e:3a:89:0b:4f:71:b6:
70:71:e2:68:ff:b1:a1:59:91:a8:b3:72:13:cb:38:
13:b4:3f:68:fd:4c:63:93:8b:fb:43:ce:95:83:d6:
b6:31:03:b7:62:84:bd:a8:7c:f2:6e:a4:98:b0:96:
64:53:6f:b3:c2:b3:ef:22:0e:e6:a1:05:5b:ec:94:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:E4:44:BE:ED:2C:19:0A:94:51:F2:67:53:37:87:34:1E:64:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8765::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:53:17:36:2b:4d:04:6b:31:3c:59:17:39:4b:68:a3:01:fd:
ce:c6:7c:7e:12:7c:48:73:e1:87:87:dc:3c:5f:a7:2e:a1:b1:
6f:11:6e:34:88:05:28:f3:7e:37:89:88:cd:61:81:74:bb:6d:
8a:b3:f1:39:ed:8a:08:44:a3:f2:04:43:7f:35:af:a8:53:3a:
79:f1:66:2b:b1:34:77:e7:5c:35:89:e0:9f:b5:1e:20:ef:cd:
65:90:fc:4c:fe:36:12:00:77:82:bc:40:cd:1f:ae:ff:06:d6:
b8:be:ed:df:e2:02:fd:24:b2:c3:f9:ea:0f:2f:26:b6:f2:41:
17:2e:30:d7:c8:12:22:16:9e:03:eb:74:48:5d:dc:bc:4a:1e:
2e:f2:af:7d:e2:86:df:ea:5c:00:5e:4d:27:b9:0b:f7:5f:e9:
bd:5e:69:07:16:96:68:6c:cb:c5:cb:2e:d1:3f:45:e3:05:51:
8b:88:1d:f0:b6:40:02:4d:11:0a:0e:47:f6:09:3d:bb:43:0b:
be:9d:3a:5a:fa:33:63:41:86:34:6b:61:88:42:ec:08:31:d0:
0c:1a:c0:4f:23:7a:d6:e9:c9:f9:65:8a:ff:58:cf:12:2c:a2:
9c:f0:17:b8:99:e7:62:9d:f6:76:bd:94:eb:27:fb:6a:8c:33:
13:57:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:29:54 2026 by rpki-client