
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
File: bec667b2-b8e1-3af6-b197-5bffee5c7579.roa (raw, json)
Hash identifier: jlX/J6yhqMpncK9S/Mo2ot2V4uALOshOjf32t6+Lgeg=
Subject key identifier: C0:54:2A:E3:73:62:F6:3F:62:67:53:BF:01:5E:F3:09:9A:C5:69:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EF3B5F5094BAE35203340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 2601:43:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:f3:b5:f5:09:4b:ae:35:20:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=c0494cb8-2009-4d16-9888-2676354e81fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:93:26:6e:1a:e8:bb:ea:78:29:1f:07:b3:
6b:f2:36:20:29:ef:8f:54:a9:98:17:b4:74:c6:c9:
05:8b:ed:68:8d:90:a2:d1:6f:e0:a0:ac:a3:99:75:
12:49:75:d0:b3:16:34:94:0e:9d:94:20:f6:30:07:
6e:5f:eb:5c:41:9f:df:56:eb:18:2c:0d:71:f3:a8:
9d:22:63:62:96:45:88:bc:6b:d3:0a:11:ca:bb:04:
92:7a:b7:f9:11:bb:c8:c6:be:51:56:ef:18:6b:36:
15:ac:65:e3:a8:bc:19:25:1e:96:6f:d4:e5:09:c8:
6a:86:8e:8f:b9:00:1d:cd:08:f4:56:76:9b:2c:a9:
62:31:53:c6:77:ef:b6:46:27:ea:bd:d8:a3:4c:0c:
9f:e5:eb:17:b8:82:da:f5:6b:30:eb:c5:29:ce:75:
5a:79:2a:5d:47:cd:76:48:e5:9f:28:9e:f9:39:b3:
7f:68:2c:c5:9d:14:43:87:e0:be:a4:c1:e0:5b:9d:
95:c2:58:eb:36:0b:b4:2a:eb:05:3b:bc:3d:f0:13:
83:7d:9f:b3:d5:5c:ca:7d:d6:81:f6:85:85:61:3f:
67:6e:9a:9b:b0:92:d9:25:af:e5:95:49:44:0c:10:
6b:00:15:08:28:72:75:e0:1a:95:69:c7:ad:47:42:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:2A:E3:73:62:F6:3F:62:67:53:BF:01:5E:F3:09:9A:C5:69:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:43:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d5:4c:ad:cc:48:66:16:73:66:7e:54:80:de:cc:93:a9:86:
86:5a:48:57:a6:ef:fb:08:da:e3:de:c7:7d:c3:7d:60:e0:15:
95:b8:50:a9:91:c2:af:88:f2:f5:e4:ad:35:98:fc:4f:18:c4:
0b:1d:3c:88:eb:c6:2d:7f:b1:4b:24:57:7a:04:24:32:84:68:
37:26:89:cc:61:ed:ec:c2:33:02:bb:df:e2:20:e2:13:bb:84:
e4:71:50:ff:bb:65:96:a1:79:06:c1:36:34:1e:13:65:ea:6d:
1f:b4:d3:ed:ea:f3:4b:33:39:70:9a:44:72:57:f2:b6:5c:dc:
51:ce:9e:80:5e:60:dd:e7:ee:9d:11:98:5e:90:f7:52:1c:94:
e5:b6:7b:06:c2:27:79:5f:00:63:b9:59:6f:7c:05:94:3b:5b:
0b:f5:ad:08:7f:e2:e1:c3:34:9b:d0:63:b5:03:4e:53:7d:fd:
a7:7b:2e:e5:d4:87:5e:5b:e3:96:48:d6:04:7a:7f:38:47:9f:
0a:74:4c:19:ff:27:39:36:e8:dc:55:28:9a:e0:45:2d:f5:ac:
ab:34:64:19:95:56:aa:4b:82:34:84:e5:7d:71:0a:48:94:ea:
91:8e:04:e4:5c:c5:4f:f4:68:48:fa:09:1b:68:72:18:fa:75:
e7:ff:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:23:55 2026 by rpki-client