
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf18b2b-bb4b-34d9-99e9-0017e754f7a5.roa
File: baf18b2b-bb4b-34d9-99e9-0017e754f7a5.roa (raw, json)
Hash identifier: fEsmMA8E8sq59or5uwKdQGOYUxtar3Z9JS5r0kQ18ug=
Subject key identifier: CF:6A:EC:94:C4:B1:35:59:3D:5F:F6:6A:D5:49:D0:02:A7:DB:DB:28
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A60C1BAABF7FF1F750240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf18b2b-bb4b-34d9-99e9-0017e754f7a5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2001:559:59c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:60:c1:ba:ab:f7:ff:1f:75:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=052723ad-8199-40e1-a1cd-a08be33904bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:07:18:85:77:6a:ac:57:b4:04:30:e0:0c:
97:ef:64:73:a0:a0:1e:f6:4e:df:39:f5:46:c0:74:
b3:f7:24:38:0c:e1:3c:ad:87:63:d3:48:1a:f2:9f:
3e:a8:0a:40:1b:84:9a:29:04:0b:39:32:be:14:8a:
55:3c:48:54:d3:b2:49:80:e6:00:d7:35:b9:a8:56:
00:f7:93:33:c8:a7:4a:13:ba:9a:c9:81:cd:29:3a:
c0:10:a3:bc:47:eb:e8:df:d6:23:9a:95:23:3e:94:
00:be:23:45:c4:ae:d5:f3:1e:16:50:96:97:d6:97:
d3:b9:8b:df:4d:a4:28:a5:9c:fe:3a:27:f0:1e:19:
ac:91:f6:87:ca:1b:c7:45:b7:68:d8:28:4e:16:8a:
4b:b0:e9:1b:41:df:10:05:48:33:99:4d:c7:75:f6:
47:f6:66:45:f7:11:16:de:1a:4e:92:8b:5a:fe:72:
58:20:d2:32:3b:43:2e:f7:c9:c7:02:b2:24:de:66:
4b:89:26:e0:42:74:cb:26:df:28:0f:36:df:38:39:
cd:79:b3:45:5f:ac:11:9d:d4:82:b6:1d:30:71:f4:
a6:0e:64:eb:e9:bf:4f:89:66:8b:d0:2d:04:b7:77:
a1:80:c1:c0:9b:9b:fc:84:07:8f:aa:74:e2:63:77:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6A:EC:94:C4:B1:35:59:3D:5F:F6:6A:D5:49:D0:02:A7:DB:DB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf18b2b-bb4b-34d9-99e9-0017e754f7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:59c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0d:6a:92:d8:5e:8c:64:7e:57:23:3b:2e:7b:fd:98:90:0d:
2a:27:f3:cc:7f:8e:5a:2a:7e:9d:fb:f5:39:37:7f:a9:0f:39:
d5:b9:84:28:95:e4:4b:0e:bf:12:72:48:b7:5f:38:00:74:d4:
f0:3b:5b:24:f1:c6:06:26:c3:3f:f4:ea:c4:13:18:dd:d2:58:
72:35:6c:e6:0b:c6:36:18:5b:91:fa:b7:0a:a0:9e:44:f1:92:
2b:23:3b:80:1e:ad:33:d5:8c:f5:55:b3:e1:e6:ba:02:fc:0e:
cc:78:c5:75:71:f1:5d:55:71:d7:dc:49:b1:f2:a8:cd:29:ea:
45:70:04:20:a1:84:94:1c:d9:03:dd:a8:ae:4e:19:7f:47:b9:
16:94:46:f8:b3:84:95:53:eb:d8:82:96:50:1c:ca:17:89:c3:
5f:67:59:81:2a:25:cf:82:cb:47:66:af:7b:99:a0:e9:b2:71:
f3:58:a6:47:2b:06:5b:52:6d:31:84:0c:2c:f3:cc:25:2a:23:
87:88:ea:23:0b:f3:c9:11:8b:30:26:b0:61:de:a7:c0:51:dc:
69:75:94:f5:05:91:a4:9b:b7:1e:8b:95:0f:2a:51:f7:74:6c:
c1:e6:ec:80:ba:6b:9d:5f:1a:13:de:e4:5e:53:4b:81:b5:f0:
8e:fa:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:44:03 2026 by rpki-client