
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
File: 87ed16a7-45d5-3232-80e3-ebd14dba89db.roa (raw, json)
Hash identifier: jqp2e34TxXcB6CecE9hoblXDuoIIWxaJn3sJZLPCN0s=
Subject key identifier: BF:78:7C:9A:41:34:0D:80:83:9E:6A:8A:48:D0:49:26:DE:FE:71:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D24DF832A985CC38CE306C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 396560
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:83:2a:98:5c:c3:8c:e3:06:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=7f8e3155-ee0f-49c2-96a7-2668e34a7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:6a:ea:8e:e9:25:a4:48:16:ca:9f:74:69:
5b:8a:9a:ff:f3:63:f9:86:6c:96:7b:9b:d2:b7:84:
f5:85:cd:7b:72:d0:80:07:7e:15:2e:24:58:ff:4f:
74:a1:e0:fa:54:f1:fa:e7:14:e1:3b:66:20:d7:5e:
7a:5e:8d:52:4f:47:41:db:12:b2:0d:2b:37:50:97:
9f:7b:82:48:77:f6:c3:b1:0a:a7:5f:58:6d:8a:f3:
00:28:66:87:6c:8f:82:1c:fd:d8:1a:75:83:6c:26:
de:f5:4d:e0:91:c1:30:b4:d1:37:f2:72:fe:1b:5c:
fd:b0:15:9a:da:ce:ce:84:b5:76:7c:b2:66:d2:0d:
a5:e4:95:84:5d:a7:6d:1f:8a:01:d2:56:3b:05:b2:
1c:2a:1c:17:4c:a8:bb:e1:e0:cd:3d:bf:8e:0b:4c:
d3:80:46:30:4f:99:3b:22:fe:93:a8:56:bf:c0:b5:
d9:d7:d6:7c:da:6d:12:5f:69:cd:57:fa:62:9b:77:
c7:70:e8:f1:1e:ee:44:3d:62:0b:ec:fb:21:3e:18:
b0:1a:cb:47:94:0d:59:a1:f7:6f:02:96:85:43:47:
23:e2:6f:a5:76:8e:74:72:f9:14:46:06:f7:d1:aa:
52:6a:47:03:c1:b4:58:c2:c5:78:ad:f1:a4:b9:bf:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:7C:9A:41:34:0D:80:83:9E:6A:8A:48:D0:49:26:DE:FE:71:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ed:22:79:d1:69:b5:92:ab:8a:c6:4e:6f:98:40:8c:e0:63:
cf:3b:fe:09:a7:c6:c2:e5:23:f8:98:08:59:a5:8a:be:bd:4a:
7e:05:fa:6b:cc:f2:d6:91:a7:e6:99:d7:85:d1:18:0a:ac:57:
48:75:77:77:04:00:9c:36:d5:e2:6b:79:0a:a5:e1:62:a3:bb:
54:07:cb:8b:2e:98:a0:d7:8d:5d:74:29:10:51:ad:27:8a:40:
67:c0:48:76:43:54:40:19:fb:aa:9e:a1:ea:82:61:fc:63:23:
7c:48:38:82:2d:71:f2:f8:ce:06:92:a0:a2:df:be:38:da:35:
50:4a:91:5b:58:08:60:9f:43:5b:b7:3b:90:8b:d5:87:5a:46:
e8:e3:37:73:78:0b:20:0d:de:ce:40:68:2e:e6:c7:f4:90:48:
e4:31:83:82:1b:db:ed:f8:6b:e7:ba:cc:44:f1:50:c3:31:4f:
28:40:e4:5b:4f:ee:0b:ee:de:35:5b:fd:37:2d:79:37:66:98:
88:4b:e5:ce:41:a7:2a:1b:bf:af:c9:4e:c1:69:6d:5b:1e:00:
10:c7:04:8c:fb:15:bc:9a:c3:e8:09:f7:c9:cb:ed:9a:00:87:
30:4e:d7:60:fc:88:a0:b7:b7:26:12:43:1e:d2:e7:38:d7:f6:
53:64:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:39 2026 by rpki-client