
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e3f1d5d-320d-366a-a9a2-5d8a37288741.roa
File: 8e3f1d5d-320d-366a-a9a2-5d8a37288741.roa (raw, json)
Hash identifier: xK8SC6jppEVtbR96Xygt/3G7QE4yZmx4AEVi9bHGOX8=
Subject key identifier: A6:4E:4C:6E:2A:A0:5D:F0:D4:60:99:26:57:DB:9F:45:58:9B:BB:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A3BEC5AD15EA880713920
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e3f1d5d-320d-366a-a9a2-5d8a37288741.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 40717
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3b:ec:5a:d1:5e:a8:80:71:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=6b30689b-91b2-45dd-8d3a-e36a5fdce820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:8e:37:04:48:cb:6d:52:32:b4:3b:97:f0:
9a:fe:af:87:42:b0:e7:96:21:8e:1a:74:a5:d7:32:
d5:09:35:ed:e4:40:3d:ba:e5:04:87:55:67:51:bc:
f5:00:05:aa:f7:56:bd:40:7e:e8:66:e7:ed:2b:f0:
5b:90:b2:6a:1b:4b:f1:42:75:8c:59:6d:ae:e3:f9:
4c:ec:b9:4e:ef:1e:5b:14:c7:36:e6:3f:ed:ed:52:
0a:2f:51:b2:66:27:a1:1b:bd:ef:94:f3:74:9e:59:
2e:81:9b:a6:d8:91:b7:02:2d:08:36:c7:05:0d:b3:
29:67:a9:f9:df:c7:15:99:74:a9:b0:e5:05:50:cf:
98:48:c3:d6:f4:e5:d7:9e:79:55:67:39:ac:06:c2:
d0:9c:ef:5b:e1:17:d9:09:a3:43:95:84:9d:45:f1:
4f:32:4e:7b:07:87:21:6e:50:98:80:f1:18:af:fa:
c1:fe:26:bf:37:72:97:46:0a:e9:f2:f4:52:d1:ae:
c2:f5:17:45:20:1f:5f:e6:ff:12:0a:58:1b:c0:a2:
76:ba:29:c4:76:14:41:71:72:37:fe:bd:bd:a3:9d:
41:ea:d4:ac:71:6c:e7:1d:55:13:d0:d4:b3:d8:73:
9b:47:22:d8:a6:16:b1:88:a5:ff:25:5c:16:53:3b:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:4C:6E:2A:A0:5D:F0:D4:60:99:26:57:DB:9F:45:58:9B:BB:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e3f1d5d-320d-366a-a9a2-5d8a37288741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:8d:3d:86:e6:17:e8:71:c3:5d:07:b0:5f:e0:4c:0d:0d:1a:
a4:3d:fb:13:9d:26:d7:1b:2f:95:58:e1:e2:2d:52:de:e9:96:
ae:0c:f1:0c:ce:af:68:ad:d6:17:85:e4:09:81:45:19:7b:46:
a0:30:0a:88:f4:67:b7:84:be:23:e0:c0:dd:d8:5b:42:dd:1a:
8a:df:3d:3b:1f:d5:90:c8:98:da:bd:ba:4b:59:c2:bf:f4:fa:
dd:e2:e0:4b:e3:63:c8:1b:40:71:d7:91:0f:15:07:4f:80:89:
d0:a8:11:5c:9e:6e:fc:f5:ae:49:b4:0d:6d:e0:83:88:7c:c0:
ea:4a:07:21:77:af:b8:12:7c:b0:aa:38:62:06:7c:07:92:c1:
28:cf:a4:68:be:1e:fe:5a:48:84:6f:ab:5d:e7:3f:41:82:64:
41:64:98:17:13:88:c8:8d:e4:68:4c:b4:0a:7d:06:66:ec:6e:
4b:99:54:7b:6e:73:c5:53:17:34:63:07:ca:25:53:04:b1:b5:
c7:73:0a:f9:44:43:88:29:e5:42:78:b1:45:10:7f:41:83:62:
44:f1:45:6f:c6:bf:ee:fd:9f:63:85:0b:4a:ac:8e:d8:6f:f4:
c9:ce:4f:07:65:4f:e2:e1:6e:c8:9e:56:e8:e1:36:c3:7c:9c:
d9:50:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:28 2026 by rpki-client