
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23dc9ddf-b528-3481-9c1d-3193d6a96d96.roa
File: 23dc9ddf-b528-3481-9c1d-3193d6a96d96.roa (raw, json)
Hash identifier: J6P/RQiGYUa1+B4EpZrYTQnB8E6e7TIV9ltU2rwPRJU=
Subject key identifier: 12:E4:4F:38:E6:62:ED:63:4B:B0:5D:A6:6D:C4:AB:80:D7:CD:B7:99
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F75A7CDC7B8317E8F084EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23dc9ddf-b528-3481-9c1d-3193d6a96d96.roa
Signing time: Tue 10 Mar 2026 14:28:42 +0000
ROA not before: Tue 10 Mar 2026 14:28:42 +0000
ROA not after: Mon 08 Jun 2026 14:28:42 +0000
asID: 397194
IP address blocks: 2001:503:d414::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:a7:cd:c7:b8:31:7e:8f:08:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:42 2026 GMT
Not After : Jun 8 14:28:42 2026 GMT
Subject: CN=a6f304ad-92fc-40d0-b241-b52c17d414bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:be:c1:19:14:fc:30:97:1d:e3:54:79:5d:
07:a1:03:a8:f5:62:7b:41:d3:05:0f:de:ab:51:1d:
ed:a6:3c:8b:4a:2d:9a:9d:79:51:40:cb:f7:a2:8d:
1a:98:bf:d6:05:f8:ff:5f:4d:6a:55:0e:e2:c6:d1:
b7:fc:13:55:7b:e8:45:db:58:f4:de:47:1a:ec:f5:
9a:84:36:54:ad:a1:62:bb:14:a8:64:2a:da:77:95:
84:fd:76:1c:13:14:d0:cd:54:78:5e:46:be:46:d9:
9d:07:31:55:51:8c:a8:88:a9:cd:6e:0a:69:ee:40:
6e:41:96:b0:79:e0:c0:d4:d0:5d:a9:11:42:06:8c:
8d:c8:13:0c:5b:51:4e:45:ea:e4:80:fd:c6:98:ab:
af:14:19:d5:5f:e0:88:3b:db:d5:1c:c1:60:2c:f6:
3f:74:80:bb:60:45:8d:8b:48:e4:1c:5d:ad:e0:65:
4f:65:0a:35:f7:f3:16:f5:74:f1:47:c1:6a:b1:01:
f8:c9:09:38:dc:49:85:df:53:3c:9e:36:f0:91:b5:
70:ab:87:0c:a8:2c:9c:f9:85:29:60:d8:59:aa:25:
c8:ed:e8:6e:3c:24:1c:b8:51:44:71:0a:af:88:ab:
40:fd:47:f9:27:85:28:ef:4c:79:cd:d9:f1:87:29:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:4F:38:E6:62:ED:63:4B:B0:5D:A6:6D:C4:AB:80:D7:CD:B7:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23dc9ddf-b528-3481-9c1d-3193d6a96d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d414:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:b2:e6:6d:95:1a:bb:f2:d1:61:3d:c8:b0:60:03:2e:e6:f0:
f5:70:0b:3b:c0:5a:dd:4f:14:8f:9f:5a:e1:37:8c:ea:f2:3f:
1a:d3:3b:75:11:7c:be:1b:3a:c9:fc:50:ff:a5:bf:62:33:f1:
70:ea:e4:66:dc:eb:4e:49:b2:b3:f4:df:2e:76:43:d6:6b:8f:
4f:a4:d7:5f:97:d3:ae:f5:21:7f:cb:3c:2d:8d:1b:2a:29:f4:
e6:df:19:c5:a8:e5:7a:b8:fb:96:66:96:f2:ef:99:0f:b3:de:
2e:ea:40:63:80:31:0a:83:8a:60:2b:ff:ac:df:88:42:3c:67:
70:fc:f9:63:c7:43:2c:c6:22:3f:4d:30:6b:66:75:dd:b1:6a:
52:93:bc:f7:fe:b1:6f:d1:db:cd:6f:75:c9:1f:52:f4:a4:02:
1a:a8:d2:f6:54:9e:1f:ae:26:f1:4d:84:c7:df:ec:65:f3:fa:
16:1f:a6:04:12:38:82:52:2e:19:4c:45:24:1c:71:23:bf:bb:
17:64:7d:7b:3a:aa:01:af:89:87:88:5a:5a:35:6b:29:c6:f3:
a3:5e:99:4d:44:e7:cb:a3:48:02:06:39:02:09:d8:9c:f3:e6:
b7:23:45:4e:b2:6c:7a:0c:66:34:4c:23:c6:19:cf:a0:b7:87:
07:f2:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:01 2026 by rpki-client