
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e7fcd70-0e44-39b3-905b-69c1c04d7420.roa
File: 4e7fcd70-0e44-39b3-905b-69c1c04d7420.roa (raw, json)
Hash identifier: GlzuUXnfnyk9DQd/FHb6v5F6ustDu2S+Tugo+4VSyp8=
Subject key identifier: 68:EB:2B:81:2F:28:00:67:B1:12:E6:08:2E:4C:89:F4:A6:13:09:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D422F823723E4F3E936F67BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e7fcd70-0e44-39b3-905b-69c1c04d7420.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 396555
IP address blocks: 2001:502:cbe4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:82:37:23:e4:f3:e9:36:f6:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=c821ab7f-eb3b-48a6-a4c1-5a3c483ba189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:61:a7:1d:d4:a0:77:ad:6e:22:47:5a:c7:
01:79:a5:95:d0:01:6c:fe:ed:e8:d2:e3:99:04:0f:
21:a7:fd:78:69:57:84:6b:47:7b:2d:51:c8:b6:6f:
b1:a2:84:8d:51:37:2f:dd:3a:24:6f:5c:49:bb:ed:
1f:66:e2:d9:61:13:6a:45:37:c6:96:e5:a9:a9:70:
69:5a:b9:db:1e:67:8c:2d:01:a9:f9:59:29:f3:0b:
dd:56:c0:b1:ce:a9:0d:aa:5d:1c:c6:64:57:58:e3:
10:8f:86:13:e3:4b:f7:80:3b:a3:32:df:05:2a:55:
0f:24:f0:97:d3:10:21:f8:e0:cc:23:90:42:ce:80:
98:09:3e:05:bf:04:f5:5d:ee:38:95:1d:34:0e:a8:
1d:0f:24:0f:42:2a:48:8f:3b:5a:37:1a:89:02:27:
42:cd:40:e0:47:d9:8a:e5:9d:42:5c:6c:51:09:2c:
f3:0c:6d:29:e1:99:54:62:f2:61:9e:14:bc:96:a0:
8c:1b:76:5f:ae:d4:fd:54:dc:51:1a:a6:ff:a2:32:
09:41:57:35:79:c2:f3:12:21:c7:28:d5:14:72:e0:
6b:04:24:8a:05:fd:70:db:e6:2e:29:ee:ae:19:81:
09:67:68:5d:b7:e5:70:d8:0f:10:a7:9b:6e:ad:5c:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:2B:81:2F:28:00:67:B1:12:E6:08:2E:4C:89:F4:A6:13:09:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e7fcd70-0e44-39b3-905b-69c1c04d7420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2f:bf:14:aa:90:35:e4:2d:1a:1a:11:46:67:b6:1b:93:50:
57:54:48:a1:09:dc:71:4c:87:29:fb:ab:27:e6:53:23:69:4f:
48:8d:0f:ab:10:25:ec:d0:41:1a:fc:2f:13:76:b2:67:a9:88:
4f:41:0f:68:32:d1:39:c3:fd:a9:db:93:a4:c7:da:55:6f:f6:
31:c2:85:39:8a:25:7d:09:9f:27:8b:5b:30:17:3a:90:cd:99:
bb:ed:3f:54:e4:fc:8c:39:4a:18:b0:4b:37:b7:7d:30:95:7d:
21:36:10:76:3e:d4:ca:1d:c4:3f:7c:14:61:a2:7c:a9:0e:fa:
06:5f:3f:1b:ef:69:78:6f:69:26:d2:18:4b:24:b3:37:91:61:
bf:2f:88:47:79:d9:c1:28:3a:63:4c:60:60:d4:2b:a0:4e:f2:
f2:ba:dc:38:f9:9f:22:e6:bf:a6:63:e2:a2:ff:8f:b3:73:f5:
00:90:47:c6:2d:7c:6f:f4:27:50:d2:24:9b:af:85:ba:1c:03:
e6:58:70:bc:8f:f6:e3:14:64:e3:18:ba:55:54:16:12:a2:11:
d1:7f:20:7a:d4:03:91:3b:a7:b1:38:ce:9a:5d:ec:15:d4:c8:
20:cb:f1:1f:66:aa:59:6e:67:99:64:35:cf:1e:45:af:a5:bc:
46:d8:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:29 2026 by rpki-client