
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
File: 20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa (raw, json)
Hash identifier: Uu0MOXJZUMT2W311t4rm1IVP0Bp/ZvmiuZImypHhV8M=
Subject key identifier: 8C:A2:C7:43:F8:F8:C9:2E:05:EA:05:9C:F7:D6:FE:D0:AE:D8:E9:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F75A2499D544F986D446E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
Signing time: Tue 10 Mar 2026 14:28:39 +0000
ROA not before: Tue 10 Mar 2026 14:28:39 +0000
ROA not after: Mon 08 Jun 2026 14:28:39 +0000
asID: 396550
IP address blocks: 2001:503:d414::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:a2:49:9d:54:4f:98:6d:44:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:39 2026 GMT
Not After : Jun 8 14:28:39 2026 GMT
Subject: CN=0075b271-2527-4ea1-baf1-fe60286f0575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:58:54:93:89:7f:32:8b:72:91:06:d3:c9:
4f:48:76:69:da:a7:37:8b:4e:a2:e4:eb:85:a4:8b:
03:c7:8b:98:33:1e:c6:1b:21:7a:fa:c5:cf:88:d8:
40:35:a2:48:47:12:48:07:dc:22:60:17:d3:32:4f:
e8:9e:fd:56:8b:3f:ef:74:b5:b0:98:e3:59:8f:8e:
de:6b:da:45:91:a5:7e:c4:8f:de:1c:c2:1e:a6:8e:
a6:e0:53:41:5c:ca:61:5e:8c:33:49:e6:58:42:b2:
9e:85:98:cb:f7:14:7b:aa:0f:2a:88:1c:77:d5:90:
53:03:99:32:8f:44:9a:ce:3e:7d:ca:1c:2d:f4:32:
3a:63:a0:ca:d9:47:36:c9:93:36:93:09:61:25:c8:
ef:b8:f6:76:ae:ae:12:75:3b:8f:58:fa:03:7f:8f:
af:4e:3e:09:a4:dc:34:e1:f6:17:93:62:45:9d:27:
41:bf:7d:66:e6:ba:fc:ab:6a:c2:0e:5e:4c:05:79:
6c:f4:6a:7a:ac:68:9e:2f:33:3b:85:a3:1a:c0:4b:
95:cb:38:f1:d8:01:99:a8:0a:ed:02:15:dc:52:d2:
e1:b7:65:6c:0c:a3:b8:da:0f:bb:20:7d:6c:dd:4f:
b3:61:d7:f8:bd:6d:41:7f:25:a1:61:58:43:8c:99:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:C7:43:F8:F8:C9:2E:05:EA:05:9C:F7:D6:FE:D0:AE:D8:E9:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20af28e9-1fed-3f1c-9976-b2874f1a5d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d414:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:16:33:5e:96:23:2b:00:af:45:52:a6:26:b4:23:94:4d:3a:
e7:c9:28:ee:7d:19:01:06:43:40:62:09:e6:e4:83:7d:9f:30:
ff:e9:d4:01:5f:20:9e:2c:65:2f:0f:6b:45:06:6c:b3:59:0d:
9a:81:48:cf:ac:52:42:06:d7:50:34:9f:9e:c0:3e:9b:73:5e:
43:33:71:20:af:82:b4:ac:7d:9d:78:16:e4:6e:a5:95:72:b8:
6b:20:c1:e5:6f:77:18:5c:ad:01:10:b8:2e:70:19:8c:67:cc:
76:56:47:9e:d4:1c:24:73:83:fb:58:72:03:10:b4:55:9a:33:
a0:77:95:fb:5b:23:b8:fc:85:c7:db:4f:a1:ed:2b:0c:18:5e:
be:9f:fb:75:e3:48:0d:26:d9:4e:d5:1b:9a:53:2b:7d:22:96:
56:ae:46:16:a5:e0:2d:fe:03:0e:b6:10:a5:36:95:89:5a:7a:
e7:ff:6e:0d:1c:67:00:0d:0b:47:5e:96:32:27:c8:88:01:71:
39:72:b1:d9:f0:58:68:d3:5a:8c:ef:c4:d0:29:8a:11:b2:25:
37:dc:52:c0:3b:8a:72:e4:a8:0b:4f:04:c5:96:44:0e:2d:67:
e8:81:8f:f8:a3:f7:a2:4e:de:b7:cd:9e:0b:07:b3:29:9f:25:
89:1f:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:33 2026 by rpki-client