
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2948ec8a-871f-36bc-b4dc-92b85ac86518.roa
File: 2948ec8a-871f-36bc-b4dc-92b85ac86518.roa (raw, json)
Hash identifier: tHz2LAF1FZKcJlKrzzhpBN0Qj+NMOtpADgZFsgAn8CU=
Subject key identifier: 9C:4A:72:E5:FA:0D:7A:1A:DB:F6:B0:3B:98:DC:89:32:59:2A:2D:E7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A666770DD70A6E3B7F6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2948ec8a-871f-36bc-b4dc-92b85ac86518.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396727
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:66:67:70:dd:70:a6:e3:b7:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=6232a5ec-ee95-4d5a-8f91-89efde5524bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:b8:b2:6a:66:42:2b:1d:89:05:ce:e5:1a:
c8:8f:72:72:95:99:a6:d2:a9:c6:0b:54:16:1d:6f:
df:04:d1:85:64:8b:19:f4:e1:5e:27:d2:c5:07:d1:
4c:a0:6f:79:26:be:39:59:01:3e:bd:c8:8a:b9:db:
41:f7:23:ba:26:8d:4c:79:ba:50:25:a2:ca:5d:60:
38:49:a8:bc:ef:e0:b0:58:17:7a:7a:f6:10:32:6c:
2a:c0:f6:2f:03:af:7b:24:bb:0c:53:90:8b:0a:46:
fc:b2:7a:11:4f:e1:b4:22:97:76:1e:77:9a:cf:ee:
2d:be:dc:d0:4d:80:b4:c1:36:f1:b3:c3:bb:df:f4:
3c:57:25:50:c8:7d:c0:10:6d:c5:81:7c:ab:18:9d:
62:07:6d:44:86:15:25:6f:31:43:2a:28:5f:d8:df:
76:64:fa:0a:b3:c6:4a:19:2f:51:10:f8:e7:3a:c4:
d1:28:3a:3e:0b:71:55:51:75:6e:f0:2d:4b:ec:13:
6f:ef:26:86:d2:f1:d5:43:ef:f4:42:29:22:0d:93:
87:c2:ff:e6:d2:e5:27:a1:06:67:54:20:e8:52:3b:
ed:3d:70:cd:6e:4c:67:18:b5:46:79:aa:e7:1e:16:
09:33:43:d2:db:3c:92:8e:26:ff:a6:60:46:be:60:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:72:E5:FA:0D:7A:1A:DB:F6:B0:3B:98:DC:89:32:59:2A:2D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2948ec8a-871f-36bc-b4dc-92b85ac86518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:91:27:83:d4:90:35:c8:c2:ae:de:00:08:98:b4:3d:cc:cb:
3c:af:e6:86:97:ac:b7:9d:14:67:e9:0b:40:ae:8b:ce:6d:47:
2f:e2:90:52:3d:a8:5f:2d:fa:81:28:3f:0e:01:d1:7e:2c:7b:
31:c2:60:b1:ca:e5:e8:ec:88:3a:ce:9b:c2:02:95:0d:8f:19:
0a:e6:a0:d8:13:4b:60:ed:8c:57:ab:68:66:78:3b:a8:4d:61:
63:19:ca:cd:78:f2:1b:30:4e:c0:bb:fa:74:cf:82:c3:9c:95:
ad:26:4e:b2:45:27:08:e6:d5:5d:25:3c:82:e1:d0:05:87:4d:
cd:8a:54:00:b0:0f:ef:9b:e9:d4:87:99:3b:7e:2e:74:70:3d:
11:f0:a5:96:58:0d:ab:21:41:5a:f4:7a:91:f6:31:d1:78:8c:
a3:5b:16:be:56:13:7a:2d:f2:26:f9:02:64:43:7e:fb:36:bd:
ee:a0:35:a0:af:c8:a8:83:6b:47:10:0b:41:85:70:df:c1:9e:
62:4e:c9:da:83:a1:c6:4a:ff:fc:d9:dd:0d:cc:df:36:2f:55:
34:39:47:ef:cc:fd:8a:20:20:d7:1e:95:67:ed:3c:d6:21:45:
29:7f:09:25:3d:85:eb:e1:9a:d8:71:a0:7b:50:48:c3:f1:97:
ee:26:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:10 2026 by rpki-client