
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a64b3956-f328-388e-965d-0b038c1e4018.roa
File: a64b3956-f328-388e-965d-0b038c1e4018.roa (raw, json)
Hash identifier: D77/qIRscJBfQjaRmHXVUDqHHcRaH9UmwTQLWDDexFM=
Subject key identifier: 5B:21:17:23:E6:19:00:FF:EE:2D:64:96:7A:4A:F6:FB:2D:5F:BE:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D24DF61322A504CC0173906B8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a64b3956-f328-388e-965d-0b038c1e4018.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36623
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:61:32:2a:50:4c:c0:17:39:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=4457a048-fe03-4dde-8d4c-20ded0af9378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:dc:40:50:b3:1e:81:8f:6c:c0:d9:63:3b:
d9:83:1e:e8:bc:7d:75:f0:f7:0e:f9:d0:18:8c:13:
76:86:68:01:17:62:33:a0:bc:2d:2f:bd:55:75:91:
e8:ea:bf:52:d2:75:1a:e1:28:22:1d:d1:de:a9:b8:
79:95:14:9a:b1:ac:62:8f:6b:24:e9:70:08:22:b0:
c5:d3:bd:36:94:80:92:0b:ba:26:0f:ae:63:6e:9f:
3e:ba:a4:ca:37:d5:f8:26:d4:a7:a3:b5:5a:c5:b4:
9b:0a:a8:6d:d5:93:be:6d:31:37:f0:aa:4e:1b:01:
dc:b8:c5:0b:75:af:7c:89:75:fd:2a:77:09:52:a6:
c3:64:9f:24:49:a5:b8:1a:be:3f:02:f9:6d:c4:f0:
54:61:78:f3:d1:cd:f1:52:b5:fb:a9:68:65:96:e6:
29:5c:2f:e5:9c:bd:40:8c:3c:a1:be:73:10:68:d6:
2a:d5:2e:4c:ca:b5:35:8c:cb:a1:8d:71:0d:50:f7:
32:7e:ce:a4:cd:db:49:49:d6:36:de:99:64:e2:b9:
9f:5a:59:33:bd:8f:c1:c1:24:ca:f8:1c:4f:36:8b:
42:ec:d2:87:51:2f:09:61:76:57:74:00:32:f3:fc:
0a:28:89:6d:00:a3:c1:3c:cb:ea:9d:d3:f8:b8:a2:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:17:23:E6:19:00:FF:EE:2D:64:96:7A:4A:F6:FB:2D:5F:BE:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a64b3956-f328-388e-965d-0b038c1e4018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:86:09:30:c0:59:93:b4:6e:87:7e:67:1f:96:96:86:91:63:
ee:d3:dc:db:7b:39:e6:85:0a:42:59:12:44:b0:94:32:37:ff:
ce:e2:5d:14:df:dc:b0:61:21:26:b4:0f:7d:68:48:68:ee:bf:
ac:b6:a7:79:92:3e:7f:a9:5e:6d:72:7b:bf:0b:53:d8:0d:9e:
63:d4:c2:74:2b:c8:24:9d:ed:3b:4c:d1:7c:45:e6:35:ef:58:
bb:1d:6f:e6:17:3a:e7:54:fe:33:61:7a:94:4b:4c:8d:11:f1:
9b:6a:cb:04:5f:87:94:f6:b1:0b:d6:0c:5c:7f:d3:28:1f:ed:
ec:24:5f:5b:4d:b2:2a:9e:23:e5:cb:e8:bf:c0:ef:88:1d:a4:
9f:f9:b7:0f:df:25:a5:ad:a7:f2:69:7d:5b:73:62:23:20:fd:
04:4e:51:50:f4:3c:88:97:c9:82:70:77:56:13:5a:52:cc:bb:
60:ef:b3:45:9c:96:47:e3:7d:55:d4:3b:ff:fc:87:27:bb:c1:
1a:03:8c:3c:48:16:07:15:71:9d:4a:f4:b3:84:42:51:24:c0:
f2:3d:66:23:db:95:d4:0b:d5:d9:83:5b:77:9d:95:0c:e6:86:
0c:b3:85:eb:ef:44:aa:e7:3c:52:f8:b1:b7:d2:87:11:2a:20:
6c:5b:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:49 2026 by rpki-client