
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa
File: 7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa (raw, json)
Hash identifier: aKCCbOliC7IgLt3egj6IK3g5t91jDPgv7rtZAaLw3hQ=
Subject key identifier: 53:6E:4F:70:AA:15:ED:54:71:26:CD:48:61:B4:14:E5:25:F5:29:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EC2A6912BAE4B80A73D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2603:2088:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:c2:a6:91:2b:ae:4b:80:a7:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=7c9070b8-aa72-4dc8-b9a6-7284b46063f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:26:6d:bd:2a:04:ee:18:7f:4d:90:15:5c:
ab:39:87:e4:56:7d:c3:bb:fa:6b:84:28:7c:f7:95:
32:dc:e1:08:ae:4a:e6:e2:8c:5d:11:71:1c:ff:e5:
57:9d:d2:de:8f:f3:d0:41:27:7a:6c:12:03:1c:df:
11:e0:41:57:fc:7b:e3:24:df:76:c7:40:16:63:48:
0d:28:87:01:da:b4:ac:be:87:66:c6:d1:bb:d4:ee:
2d:4d:5f:df:6f:c5:f9:93:f3:5c:3c:9c:20:e4:84:
58:b5:ed:9f:44:6f:72:01:ae:cb:08:80:0e:26:d9:
d6:a1:24:c3:81:33:7b:ed:49:cd:79:3f:e2:94:0a:
a5:68:ea:89:30:e8:37:b8:76:0f:fb:d9:72:67:88:
49:6a:55:4a:e9:17:05:02:9b:ab:ac:38:b6:1a:a7:
ec:96:35:7d:02:b4:e7:f2:2d:17:e7:a0:c8:1c:ea:
fe:cf:1f:fe:c3:76:38:93:64:2b:b3:88:c0:dc:ef:
30:08:35:ed:b3:11:36:4e:a8:95:96:15:0d:b2:91:
a4:5a:5a:79:9f:8f:57:36:35:e0:46:28:3e:0f:a6:
ce:c9:91:c0:bd:08:3f:6c:d1:2b:89:32:e6:df:e9:
14:0a:d7:9a:14:2b:ee:3f:8f:3f:a1:29:e7:a7:e2:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:4F:70:AA:15:ED:54:71:26:CD:48:61:B4:14:E5:25:F5:29:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2088:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:38:67:cd:fb:02:31:7c:ca:32:53:02:9b:e1:1d:59:d2:f2:
bb:f5:36:59:96:13:c3:14:e0:4e:1a:9a:e9:de:3a:f3:bf:5c:
97:55:09:97:c7:76:6d:b9:ec:e3:8e:e6:d6:1c:f8:34:56:d5:
e9:84:20:2d:3d:51:88:a0:7a:6c:be:8b:0c:69:4d:25:dd:86:
ce:80:c9:eb:14:83:d8:fe:3a:0e:94:20:71:aa:3c:0b:50:2f:
8b:5c:d7:11:2c:5e:ea:de:ff:24:f6:c2:8e:a9:97:c2:25:0d:
64:d1:6b:c8:42:9a:70:2a:12:9d:b9:7a:1e:29:bd:f8:09:50:
4d:e7:cd:8a:b6:cc:03:d1:dc:d0:96:3d:88:54:4e:f9:80:ff:
be:c0:59:14:bb:17:95:4c:a9:1c:fd:4d:80:32:af:87:77:04:
bf:0f:7b:fd:22:81:aa:98:e5:29:2a:da:19:7c:8e:89:f7:00:
fa:be:61:5a:05:0b:fb:74:40:5f:f4:52:96:9b:cc:82:f1:6a:
b4:2f:57:c5:1d:18:bf:d3:b2:b3:c6:3e:8a:eb:c3:5c:0d:27:
fd:43:93:8c:69:a7:31:6a:8e:91:2b:88:6c:64:f5:04:dc:55:
b3:a4:1c:ad:fb:73:2b:c9:b2:ce:45:1c:28:06:c2:aa:12:29:
62:20:26:01
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnsKmkSuuS4CnPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2M5MDcwYjgtYWE3Mi00ZGM4LWI5YTYtNzI4NGI0NjA2M2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvQmbb0qBO4Yf02QFVyrOYfkVn3Du/prhCh8
95Uy3OEIrkrm4oxdEXEc/+VXndLej/PQQSd6bBIDHN8R4EFX/HvjJN92x0AWY0gN
KIcB2rSsvodmxtG71O4tTV/fb8X5k/NcPJwg5IRYte2fRG9yAa7LCIAOJtnWoSTD
gTN77UnNeT/ilAqlaOqJMOg3uHYP+9lyZ4hJalVK6RcFApurrDi2GqfsljV9ArTn
8i0X56DIHOr+zx/+w3Y4k2Qrs4jA3O8wCDXtsxE2TqiVlhUNspGkWlp5n49XNjXg
Rig+D6bOyZHAvQg/bNEriTLm3+kUCteaFCvuP48/oSnnp+K6jQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFNuT3CqFe1UcSbNSGG0FOUl9SkfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q3MTM3MjItY2M4OS0z
YTFlLWExOWQtZjJmOTEwMGRmZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgiMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABjhnzfsCMXzKMlMCm+EdWdLyu/U2WZYTwxTgThqa6d46879cl1UJ
l8d2bbns447m1hz4NFbV6YQgLT1RiKB6bL6LDGlNJd2GzoDJ6xSD2P46DpQgcao8
C1Avi1zXESxe6t7/JPbCjqmXwiUNZNFryEKacCoSnbl6Him9+AlQTefNirbMA9Hc
0JY9iFRO+YD/vsBZFLsXlUypHP1NgDKvh3cEvw97/SKBqpjlKSraGXyOifcA+r5h
WgUL+3RAX/RSlpvMgvFqtC9XxR0Yv9Oys8Y+iuvDXA0n/UOTjGmnMWqOkSuIbGT1
BNxVs6QcrftzK8myzkUcKAbCqhIpYiAmAQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:52 2026 by rpki-client