
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa
File: b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json)
Hash identifier: IczuRDaftqzGwlJVjTZ6EdWvpj2EhJpTGCXb/DrAN7s=
Subject key identifier: AA:68:2F:7C:E9:DC:24:98:E9:ED:9B:3F:5C:F5:CB:EB:85:CD:66:FE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A3AA11EC62E03CF9F14A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396661
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3a:a1:1e:c6:2e:03:cf:9f:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=1a4185aa-73db-4e4a-8c1d-6f8b91a4d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:f7:3b:ac:9f:c6:49:e6:1f:6d:2a:b9:25:
1a:db:fa:c6:f7:2e:1d:98:43:a2:0a:5c:3a:1e:7e:
5b:21:67:9d:bb:11:32:34:60:1b:c0:11:da:e5:65:
7f:f0:5b:9b:1d:12:89:c6:2a:27:f8:c5:58:87:07:
61:e1:82:e8:3d:46:67:9a:60:70:17:db:68:0c:41:
f7:db:21:c4:bc:45:02:4f:ee:37:0a:53:c3:b8:4c:
4d:d4:26:66:8b:be:bf:0c:da:1e:ef:8c:5e:ec:ad:
c8:a1:8c:c8:c9:a6:28:49:38:43:f8:40:01:3c:20:
d1:cc:cf:dc:03:24:bd:76:b7:49:f5:c7:17:89:ad:
0c:52:68:f4:a8:22:66:8d:32:b4:36:4e:18:85:7b:
12:ac:16:17:70:46:5b:71:34:16:b2:9f:48:9b:b7:
7c:5f:6d:e2:4a:4b:02:43:48:3e:09:ca:61:05:2a:
9e:cf:01:5a:7f:f6:2e:91:66:a2:e8:4d:ec:c4:77:
29:77:68:b0:73:08:ce:7d:5d:10:a3:8f:09:db:a8:
7e:71:aa:bd:c8:d1:f7:ef:42:5d:d7:a4:08:94:21:
81:37:18:22:d3:a6:dd:11:cd:b0:02:47:a2:6d:a4:
54:de:87:ec:1d:b7:ab:27:17:81:25:b0:eb:f4:5b:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:2F:7C:E9:DC:24:98:E9:ED:9B:3F:5C:F5:CB:EB:85:CD:66:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2a:b0:eb:b4:90:55:d1:34:62:5c:54:27:48:cb:09:e3:86:
9c:fd:a5:52:10:09:28:4a:e6:e7:59:9d:9f:87:6c:dc:52:f7:
69:d5:43:7b:a7:9d:e3:0d:95:af:57:87:86:76:eb:6b:a3:89:
4a:cc:88:2d:95:da:0f:47:05:3b:b7:48:97:d3:67:f3:a9:a0:
3d:25:6d:ee:38:69:4c:fa:8e:a9:81:c8:b3:2e:96:47:86:ff:
34:31:bc:72:ae:22:6d:9f:e3:6f:17:4f:26:24:d6:66:98:f9:
53:49:15:70:90:44:88:bb:12:d8:bc:81:e6:47:9b:18:25:e8:
e1:59:b1:80:77:d6:6d:6f:cd:7e:02:6f:5f:8f:cd:c9:8d:c6:
a0:30:04:96:a7:08:3a:57:30:a0:9d:b3:69:b6:14:c3:30:28:
a7:4c:93:bd:3a:e8:52:b8:66:13:b9:18:f1:ec:25:b1:32:46:
ba:b3:c1:06:c6:ea:d5:db:b5:66:1c:5e:96:ef:a7:4c:36:84:
1b:50:fb:3c:60:8e:13:36:77:c9:c9:51:7c:0d:63:4e:08:ad:
de:c7:1e:37:ea:8b:ea:90:ba:ce:8b:de:09:14:d2:c9:18:7c:
ca:c5:19:7b:9a:d9:23:52:7e:ca:e6:0d:10:11:cc:51:df:4d:
59:a2:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:42 2026 by rpki-client