
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29cf3d55-c3f6-34df-b0c8-5d6698ff1431.roa
File: 29cf3d55-c3f6-34df-b0c8-5d6698ff1431.roa (raw, json)
Hash identifier: XzTEGFXSedfif44Oi3JqiM+jBGZky+UP1KLuTYbAlTI=
Subject key identifier: 10:46:B7:86:3D:78:29:3E:08:A7:83:47:C0:6B:09:81:66:00:E0:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A2C0C3AF1E6440B7B3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29cf3d55-c3f6-34df-b0c8-5d6698ff1431.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396741
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:2c:0c:3a:f1:e6:44:0b:7b:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=433970f0-a342-4d21-b2ec-98b62f5b54f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:e9:db:06:56:4b:bd:7d:95:c7:a7:85:05:
cc:98:52:6f:82:a7:5a:26:40:04:05:02:79:91:4e:
86:97:e0:53:79:ff:3f:87:71:ff:65:7f:ab:2d:2e:
81:37:a5:39:f3:9d:db:3e:1b:f1:00:80:23:ca:61:
69:16:da:bd:c3:6f:c5:e8:72:04:60:78:77:4d:59:
4f:e9:52:ae:6b:80:cb:5c:3e:f2:f6:65:27:1d:9a:
c4:3f:be:a4:3b:a8:22:94:67:60:a6:7e:18:33:6d:
04:a9:48:2f:e1:20:33:37:63:43:aa:cc:23:ec:06:
ba:27:83:f3:27:fc:a3:20:fe:cf:8b:04:52:a6:e1:
19:6f:ee:17:04:ad:d4:3f:d8:ee:15:3a:55:8d:b6:
08:98:1a:56:01:f7:36:e2:af:97:26:bc:e2:bc:00:
0e:52:ae:b2:6b:f8:c0:35:d4:bf:77:29:ef:7a:4e:
bf:be:ad:02:15:62:f0:bc:20:20:e5:d2:5b:2e:c9:
6e:ed:43:ec:c8:15:8b:7c:f0:78:de:6c:71:44:2f:
97:ed:ed:72:56:42:87:ce:c7:0c:6b:92:21:d0:13:
51:82:26:23:e4:43:f6:12:9d:fe:69:f9:7c:4d:ed:
6b:b3:68:08:43:0b:9b:c2:92:f0:f3:2d:a9:41:26:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:B7:86:3D:78:29:3E:08:A7:83:47:C0:6B:09:81:66:00:E0:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29cf3d55-c3f6-34df-b0c8-5d6698ff1431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:2a:46:c7:fc:6c:27:08:76:fd:e6:44:c4:eb:5a:ff:34:b6:
0b:6c:cc:b9:d3:23:50:66:2c:a1:3e:bf:be:39:47:2c:d3:8d:
ee:af:60:69:d3:06:4b:f8:aa:c6:e6:f1:52:47:04:01:95:51:
b1:3b:52:02:70:c9:8e:8c:02:25:4b:c2:09:c7:3c:96:a5:82:
aa:ad:a5:21:27:82:84:54:84:c6:96:07:87:b3:cb:04:81:6a:
bb:0c:12:0b:d1:ec:2e:00:fb:81:f9:35:1c:2d:d3:57:f9:ba:
ff:9d:6d:09:5b:7d:1f:01:0a:14:c6:9b:f4:21:a9:c5:77:9e:
7b:dd:8a:33:06:f0:4d:86:ec:8a:0e:2d:6d:f1:82:e1:af:f4:
26:b1:c4:af:20:93:12:39:13:d9:67:ed:f7:4d:4b:1c:e0:4c:
0a:30:1d:43:84:2a:3d:97:de:37:27:de:81:64:b0:10:ba:82:
dc:f4:62:4a:b0:a9:72:44:b8:0c:2f:4a:1b:49:d0:ee:e1:04:
74:24:1d:13:77:e5:3b:9d:24:7e:c4:c8:c8:5a:f7:6d:b5:8f:
2d:bc:91:d7:57:9d:e1:bd:42:39:4a:ad:9f:2b:df:4e:ce:77:
77:1e:45:2d:2e:06:e2:6b:ef:40:70:43:07:65:c1:55:61:8c:
72:de:da:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04aiwMOvHmRAt7NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
NDMzOTcwZjAtYTM0Mi00ZDIxLWIyZWMtOThiNjJmNWI1NGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4jp2wZWS719lcenhQXMmFJvgqdaJkAEBQJ5
kU6Gl+BTef8/h3H/ZX+rLS6BN6U5853bPhvxAIAjymFpFtq9w2/F6HIEYHh3TVlP
6VKua4DLXD7y9mUnHZrEP76kO6gilGdgpn4YM20EqUgv4SAzN2NDqswj7Aa6J4Pz
J/yjIP7PiwRSpuEZb+4XBK3UP9juFTpVjbYImBpWAfc24q+XJrzivAAOUq6ya/jA
NdS/dynvek6/vq0CFWLwvCAg5dJbLslu7UPsyBWLfPB43mxxRC+X7e1yVkKHzscM
a5Ih0BNRgiYj5EP2Ep3+afl8Te1rs2gIQwubwpLw8y2pQSaNiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBBGt4Y9eCk+CKeDR8BrCYFmAOC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjljZjNkNTUtYzNmNi0z
NGRmLWIwYzgtNWQ2Njk4ZmYxNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIQqRsf8bCcIdv3mRMTrWv80tgtszLnTI1BmLKE+v745RyzTje6v
YGnTBkv4qsbm8VJHBAGVUbE7UgJwyY6MAiVLwgnHPJalgqqtpSEngoRUhMaWB4ez
ywSBarsMEgvR7C4A+4H5NRwt01f5uv+dbQlbfR8BChTGm/QhqcV3nnvdijMG8E2G
7IoOLW3xguGv9CaxxK8gkxI5E9ln7fdNSxzgTAowHUOEKj2X3jcn3oFksBC6gtz0
YkqwqXJEuAwvShtJ0O7hBHQkHRN35TudJH7EyMha9221jy28kddXneG9QjlKrZ8r
307Od3ceRS0uBuJr70BwQwdlwVVhjHLe2gw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:08 2026 by rpki-client