
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa
File: 4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa (raw, json)
Hash identifier: kR+qQQcFc81+9fjBNEYIPRwLQ+1OFCcyeZdkLnZUhPo=
Subject key identifier: 2F:C5:04:24:94:3F:A9:EC:A8:2A:C5:52:B3:3B:35:9A:0B:44:88:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D143D71B236E1F87092711800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 397206
IP address blocks: 2001:503:ba3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:71:b2:36:e1:f8:70:92:71:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=da9cda8a-b828-4169-8b91-632c32802efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:49:26:b3:7a:3d:9c:e8:fa:39:d7:56:2b:
c3:f0:60:24:cb:d2:6a:40:e9:ec:84:b0:ae:c5:d9:
57:db:38:1c:dd:b0:6c:e4:e9:aa:44:f1:68:01:26:
51:4d:fc:b6:09:f1:34:52:82:78:b2:fa:f1:61:06:
2d:34:ca:a7:47:1a:c4:94:8c:f2:4b:f2:e3:4a:52:
9d:f9:2e:fb:a8:86:8d:72:1a:ef:1e:de:0f:d6:e8:
0a:2a:5b:05:e9:de:16:40:ca:48:98:c2:2e:d2:e8:
61:f2:4c:a5:bf:a0:b5:e9:c3:65:0c:7a:6c:cc:e0:
59:f9:65:41:1c:70:92:1e:30:20:30:b1:66:47:55:
12:b4:fc:fd:bf:fd:36:20:ab:37:0c:45:a2:52:57:
56:9e:0a:49:e0:27:d5:d2:88:be:76:12:93:a7:6f:
35:72:4f:77:75:c6:f8:ba:20:cc:3d:2b:a8:c5:48:
9b:59:7a:d7:05:d7:23:0a:f0:3b:06:1b:c0:8b:5f:
c4:7a:ef:59:5a:17:b4:90:a9:3b:94:e9:b6:c1:2b:
f5:31:a7:83:07:d9:f6:f8:6b:0a:8e:a1:12:19:85:
6f:ae:51:05:51:e5:30:33:9f:6b:3e:15:a6:20:51:
f4:23:b9:bf:81:0e:69:a3:02:43:d4:77:0f:fb:9e:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:04:24:94:3F:A9:EC:A8:2A:C5:52:B3:3B:35:9A:0B:44:88:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b94d3a8-4047-3be8-8b54-5471fb04b6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ba3e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:e9:24:5b:91:63:d0:36:50:9d:53:f4:cf:72:ea:f5:c9:01:
d7:a2:f0:a1:06:45:de:23:d1:5e:58:01:9e:70:52:49:65:fd:
95:43:52:b8:22:cc:e9:17:4d:e7:94:c6:49:f8:5f:54:38:f4:
db:8c:2c:d6:a7:40:0f:dd:5a:00:f7:de:12:10:a1:6e:a1:ca:
47:2c:3c:45:c3:83:29:b6:08:6b:48:4a:95:67:46:31:8e:00:
5f:9f:a2:26:34:4b:73:37:b7:d2:6a:58:1c:7b:47:c3:7f:30:
40:f1:e8:d2:65:bd:4f:ac:72:df:d9:71:ca:c4:67:93:d0:01:
8c:de:f6:0c:c1:6d:e7:4f:a3:ea:5c:0f:02:a8:83:b1:e8:4a:
22:77:c7:7e:2c:7a:e8:52:6f:7a:4b:03:34:31:53:2d:24:e4:
09:7f:1b:33:15:42:62:e0:a4:89:f6:d4:0b:bc:e2:e3:47:79:
57:41:fd:cc:27:c2:99:d1:d2:18:ad:77:78:73:9c:d5:24:32:
07:da:f3:04:da:3d:52:f8:03:d8:a5:ce:58:a9:e1:dd:95:d6:
7f:d0:80:7d:ab:c8:60:50:29:de:31:02:92:3d:53:83:44:b5:
1e:be:7e:8b:89:87:f5:1d:17:8a:7b:86:ba:6b:d7:31:16:fe:
44:08:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:43 2026 by rpki-client