
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2858c3a3-17f1-3a7e-8fc5-e5ca82b0abf0.roa
File: 2858c3a3-17f1-3a7e-8fc5-e5ca82b0abf0.roa (raw, json)
Hash identifier: Lo521DO0yVyBXci7POH07WNmL9vxjuG073oPA6zsaqI=
Subject key identifier: 2E:04:49:99:60:77:ED:FC:CD:4A:3F:87:C7:E4:16:6C:96:03:17:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F759DC8015DBFA39BDD3630
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2858c3a3-17f1-3a7e-8fc5-e5ca82b0abf0.roa
Signing time: Tue 10 Mar 2026 14:28:37 +0000
ROA not before: Tue 10 Mar 2026 14:28:37 +0000
ROA not after: Mon 08 Jun 2026 14:28:37 +0000
asID: 396588
IP address blocks: 2001:503:d414::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:9d:c8:01:5d:bf:a3:9b:dd:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:37 2026 GMT
Not After : Jun 8 14:28:37 2026 GMT
Subject: CN=7d60b626-78df-4d1b-b138-89cd6ecba6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:e1:8b:b7:11:2b:d1:3e:07:50:3e:70:86:
70:b2:7b:13:bd:ac:95:ee:39:55:83:63:51:66:1d:
82:7a:8f:ec:20:58:f0:79:1a:ac:d0:2f:e2:e9:73:
14:cc:74:a7:93:23:6a:b3:46:c3:05:d3:8a:12:0a:
dd:62:0a:c6:86:51:a5:8e:83:8a:25:2a:f3:0e:02:
48:8f:c1:cb:c5:81:15:d7:2b:59:45:cf:48:55:cb:
1c:1d:97:05:05:18:7a:6b:45:e0:19:7e:64:43:9d:
5c:5e:80:b0:56:4f:0d:34:46:71:e2:2b:8c:ae:ae:
9e:92:23:41:ac:5d:b4:24:3a:3f:e3:50:2e:3c:29:
65:4b:61:a2:1b:64:35:57:90:c5:cd:28:32:e1:cd:
93:0a:2c:5a:aa:3a:83:65:9a:e8:0b:c0:cf:cc:84:
01:2e:4e:3e:fc:56:06:90:96:92:82:af:ba:91:df:
7c:a5:b8:25:67:7e:17:59:02:26:de:a8:c9:22:87:
67:4f:93:88:f3:42:12:ae:a1:25:02:37:cf:d5:2c:
0c:21:94:8f:07:9d:65:9d:13:17:1f:d3:fb:31:b4:
fe:c8:a8:75:6b:45:71:71:a2:0a:8d:88:56:9e:bc:
fa:f7:2a:f5:6e:91:7b:ba:3a:87:1a:35:e5:79:75:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:49:99:60:77:ED:FC:CD:4A:3F:87:C7:E4:16:6C:96:03:17:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2858c3a3-17f1-3a7e-8fc5-e5ca82b0abf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d414:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ef:c5:8e:c3:18:b4:57:53:9c:3a:f6:48:df:2b:8f:c5:bc:
02:45:e8:d6:44:13:d5:c5:2d:e6:55:e7:9c:29:b1:c1:12:d4:
6f:2b:c2:3f:e1:89:11:79:6d:b7:47:45:38:1c:c0:15:88:5a:
c5:a1:32:5b:e3:cf:62:c9:c9:36:9a:a9:44:83:69:1d:8b:28:
1e:00:ea:7a:da:b0:11:c5:f5:31:5c:0a:31:5f:52:31:81:51:
7c:34:90:91:bc:0d:c9:15:f8:12:80:71:2a:d2:5c:67:0d:16:
a6:04:1e:6a:55:91:8c:43:fb:1e:b8:e3:b4:93:7a:ea:94:06:
b7:e2:03:a0:47:98:3a:97:c5:7e:1d:eb:24:51:6d:ca:81:b5:
fb:47:df:98:60:1f:7d:bd:ca:e4:71:a0:b9:5f:38:8d:f3:d3:
76:ee:65:10:b8:fb:39:ce:9f:18:d4:23:73:99:c1:41:af:20:
5b:4a:ea:85:e5:37:92:53:4a:88:59:e7:96:b5:91:64:8e:fa:
4d:e6:b3:83:68:01:32:f8:63:81:e1:ee:cf:a6:fe:88:ab:6f:
23:3d:b6:88:7d:bb:b2:1b:83:63:67:c3:00:14:af:06:3a:cb:
29:a5:eb:d0:ba:0c:95:14:f7:e7:10:7b:b8:0f:7f:5d:a4:cf:
e9:d6:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:39 2026 by rpki-client