
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4223e25-449f-3f09-90f6-3e597f8cb6e8.roa
File: f4223e25-449f-3f09-90f6-3e597f8cb6e8.roa (raw, json)
Hash identifier: PV7kEq1ibXtUadwSnej4VNcImNpHm+lrOQqd42I9Im4=
Subject key identifier: D9:6C:9C:B9:B4:67:32:7F:C3:B2:90:AC:30:0F:2D:2F:CF:1C:B7:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EC302B9144C6A92260340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4223e25-449f-3f09-90f6-3e597f8cb6e8.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 2603:208c:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:c3:02:b9:14:4c:6a:92:26:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=0eb98d26-8bd4-4116-844d-9558ec5a07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:4b:35:d3:91:c2:4a:15:dc:28:23:0e:4e:
4e:9f:4f:d8:c4:ba:dc:d0:64:a3:93:0d:40:cd:5a:
db:89:7e:56:da:b6:6b:a6:e6:95:0e:c9:55:63:4b:
dd:5d:32:2b:04:b3:0a:6c:66:12:50:4d:19:6b:14:
cf:b7:07:2a:eb:0e:8a:f3:d1:ff:c1:4e:bb:cd:de:
7a:e1:30:63:f8:bc:c8:43:5d:0a:e9:70:8c:06:a0:
55:4e:8b:f1:e6:00:ea:64:50:2b:ca:0a:c2:25:04:
bc:43:e4:65:c9:b6:15:97:d0:0f:51:f3:02:5a:61:
cf:09:37:78:0a:d0:1e:8f:b1:11:d2:d0:12:5d:d2:
ae:6e:2f:b5:6a:02:92:f5:6c:fb:78:22:09:79:ab:
0d:3d:a8:83:77:22:9b:c1:26:33:e1:c9:2d:53:b4:
bc:72:69:48:30:cc:2b:e8:3f:23:bc:2f:90:09:a5:
54:8b:60:66:46:75:ee:69:8f:48:0c:53:52:59:df:
80:ec:a8:92:d4:d3:61:58:e0:cf:f2:dd:c1:e5:a8:
16:c1:66:4e:5c:8a:38:c8:e1:2a:5a:4c:77:67:28:
31:a2:f7:c6:f5:6b:21:9a:00:9e:87:7b:fa:87:b2:
37:d0:c3:55:a9:03:14:5c:f1:55:ab:7d:3d:53:4d:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:9C:B9:B4:67:32:7F:C3:B2:90:AC:30:0F:2D:2F:CF:1C:B7:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4223e25-449f-3f09-90f6-3e597f8cb6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:208c:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d0:75:16:03:c1:b6:d2:25:64:5f:34:4f:7f:38:9c:ca:ea:
5b:98:21:a2:ec:2e:07:90:3c:35:e2:b5:6b:12:5e:e3:bc:2d:
35:23:d3:f5:1e:14:72:e0:a2:c0:97:20:b5:ea:2b:50:e9:44:
c2:3a:da:f3:49:7b:b4:77:35:3b:15:60:6a:30:9c:9a:2e:30:
0f:88:21:9f:1d:aa:d3:73:a4:ce:44:95:eb:d6:b7:7c:0c:44:
31:d1:8a:a1:fd:b2:85:02:03:05:ed:a6:36:58:ce:90:d4:a5:
76:6b:51:4b:ed:d6:11:60:61:9f:aa:a7:c6:51:08:6e:c4:62:
9b:24:a7:b5:c6:d9:20:bc:2e:30:c3:ad:08:9f:82:ba:c8:53:
44:aa:75:c7:06:0a:2d:11:b8:ad:11:8b:14:90:7e:37:86:04:
81:bd:a1:ef:62:c6:62:d4:36:6f:b2:a7:46:4b:dd:a8:a8:d1:
cf:ee:91:c9:f1:56:2b:5d:dc:35:c8:8d:b7:00:70:29:61:f8:
3e:ff:06:4b:dd:36:8a:8e:26:8f:84:13:f0:7e:0f:ba:bc:0e:
e8:8b:76:56:19:f9:cd:d2:22:87:1a:b1:52:f8:7f:5c:c4:f0:
b5:01:2c:cd:87:12:f1:fd:5e:6a:99:39:43:d9:79:56:4e:36:
bf:41:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:57:35 2026 by rpki-client