
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b760ab9-aefe-3f19-9202-27dcc098305e.roa
File: 3b760ab9-aefe-3f19-9202-27dcc098305e.roa (raw, json)
Hash identifier: 6d1r2slWlb4wGBtZ2/stU545mR8IwB3SYuFFvv0s6hQ=
Subject key identifier: 34:AC:D8:5C:B7:7A:AB:F6:F1:13:18:3F:EA:0D:05:3F:5A:CE:F6:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A34D10E2DCAC87C705608
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b760ab9-aefe-3f19-9202-27dcc098305e.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 397206
IP address blocks: 2001:500:127::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:34:d1:0e:2d:ca:c8:7c:70:56:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=27b00e7c-7b95-4e8f-957d-9c1d00479654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:b8:2f:1d:12:fc:49:dc:4c:38:e3:1e:a1:
23:70:35:44:9d:ec:fa:8b:b5:0f:83:03:70:ed:a0:
ac:6a:12:70:e8:6f:3b:64:5e:4f:3a:c7:e5:d0:03:
e2:a5:c9:5f:2d:49:dc:1f:b6:5e:a5:a3:87:30:93:
ba:e1:3c:ef:27:65:45:e4:71:dc:22:4c:2f:bd:94:
b1:a2:9a:f6:3b:95:5a:2e:b5:57:58:a7:28:12:8e:
a2:23:bb:58:0d:b9:13:c4:6f:06:77:16:c1:30:04:
be:fb:be:ee:df:08:68:58:27:a5:56:de:fb:9d:84:
e4:53:f6:70:0e:86:06:58:59:b7:2c:af:b1:31:84:
1d:33:49:15:05:99:d1:11:e6:89:35:4b:eb:cc:b5:
64:2e:6e:69:29:35:bc:b2:27:45:4d:0c:1d:4c:7f:
0d:6a:eb:a5:c3:ea:1c:09:27:77:02:b4:55:ee:b0:
27:9c:32:23:28:8f:47:23:c4:65:05:17:d4:8c:e5:
4c:51:c5:64:9c:e7:50:6b:21:ba:7c:c8:f0:17:4f:
ce:77:30:97:86:a0:66:67:16:5b:db:c4:a4:8a:b9:
70:cd:d8:72:07:28:6b:3e:17:9e:a6:70:73:83:ad:
b6:49:48:bf:9d:a6:95:a7:46:53:dc:66:95:54:09:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:D8:5C:B7:7A:AB:F6:F1:13:18:3F:EA:0D:05:3F:5A:CE:F6:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b760ab9-aefe-3f19-9202-27dcc098305e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:59:18:18:ec:19:99:c5:9b:25:c7:77:2b:43:1d:c8:cf:e7:
c4:e6:2d:67:10:18:a6:b6:fa:44:2d:71:d1:7e:41:75:56:4b:
f5:52:8c:7a:cb:25:11:aa:39:6e:7d:5d:b6:62:f8:47:f2:ab:
29:bc:fc:52:b0:5f:49:10:55:b5:f6:ed:a9:e7:77:96:84:e5:
18:94:ec:3e:96:42:51:99:d7:9f:75:75:f2:ee:9e:f2:47:94:
d2:8a:79:63:a8:85:ff:20:eb:91:4e:f6:44:bd:56:8d:67:36:
97:14:a5:8f:ea:14:a9:0c:e5:19:45:6c:00:d0:6e:d4:a9:16:
6b:60:5a:d8:4a:11:c9:a7:42:66:3b:93:6a:45:51:f8:17:0a:
ce:b2:a9:ce:c7:40:12:11:f6:9f:26:0b:98:89:72:35:e5:3b:
87:2f:6e:81:1e:23:f5:01:2b:2f:86:79:eb:57:7f:71:52:77:
0f:c1:f9:0c:73:43:8b:41:66:be:a3:b3:3d:06:9a:8a:e9:0c:
56:c3:90:e1:94:5f:1a:c7:9c:54:cb:00:57:e6:2e:b1:72:a2:
fd:b0:d8:ef:de:2b:5c:94:d9:d2:fb:0a:2b:4b:8b:39:6a:cc:
c4:81:43:a4:eb:ec:64:1d:00:74:4a:00:33:76:e8:54:f4:d0:
8a:d0:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:24 2026 by rpki-client