
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa
File: b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa (raw, json)
Hash identifier: 1alFMFM7Uau+Xi/3/hZH9xpRCXLEIWEQ58+knO030h0=
Subject key identifier: 6D:A1:D7:1E:0E:EE:45:9D:39:69:A8:08:F8:61:7B:D1:1E:2A:D4:F4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D143D6EA967ECF61D52218400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 396827
IP address blocks: 2001:503:ba3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:6e:a9:67:ec:f6:1d:52:21:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=5b2bde6c-4d7d-45ce-aae8-583cc4b44e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:79:eb:61:b6:c4:cc:b2:72:23:54:44:78:
d1:f0:19:ba:7b:8e:a4:96:52:ae:12:92:4c:16:4b:
87:ba:35:52:57:1c:3a:16:73:c8:a6:00:b7:89:31:
a4:af:df:2f:25:a5:b0:b5:08:1b:fd:56:e4:98:d8:
e4:cc:44:06:20:01:07:3e:85:c9:5e:97:8b:6e:34:
61:52:b9:9b:81:30:e7:1f:bb:0d:b2:d8:f5:ac:1a:
89:63:81:a6:60:9c:14:a1:b1:ff:b5:c2:70:a4:81:
50:51:fa:02:e8:a6:5e:36:38:7d:45:34:81:4a:6b:
da:71:68:3f:5f:07:af:77:b0:7e:46:5c:f9:ad:e8:
e6:71:ab:20:22:a4:fc:d0:84:15:14:0e:b1:4e:39:
49:ac:eb:61:6d:5f:26:eb:ff:51:ef:23:40:7b:02:
7d:27:d4:59:0f:eb:60:88:f1:d9:b7:f7:a1:4e:c3:
da:f3:10:db:5a:e3:df:29:38:e6:56:a1:4c:e4:09:
c0:1a:f4:c2:56:4c:b1:1f:77:2c:0a:8c:df:a4:50:
0c:bf:e1:45:c5:39:b4:7d:86:19:13:9c:14:57:65:
69:97:73:e4:2b:90:1c:50:a0:84:59:51:95:9e:67:
d8:e4:e5:a6:f2:a6:d4:b2:0c:89:81:94:a8:ff:94:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A1:D7:1E:0E:EE:45:9D:39:69:A8:08:F8:61:7B:D1:1E:2A:D4:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ba3e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:cb:f2:9e:56:1a:dd:16:22:f5:1e:13:d8:00:21:57:45:04:
80:ad:a7:65:cb:d9:cb:c8:e7:c0:cf:b2:18:09:13:d8:5e:f2:
ac:50:86:66:88:34:c6:07:5e:a9:62:9c:3f:90:bb:37:38:a6:
74:97:9e:85:37:39:0d:6a:f6:5f:eb:9f:33:74:56:98:3c:e0:
ae:bd:e2:64:b9:fa:d0:bf:60:fc:1c:82:fe:05:7e:78:83:42:
3d:5c:c4:a5:c2:fa:96:40:8c:ff:5e:01:bc:d1:ee:c1:e7:6d:
07:9b:b3:17:1f:4c:28:b5:66:f5:86:9d:74:d5:59:be:cd:e7:
52:fb:12:4e:ee:4c:12:a9:35:57:99:c8:40:2a:7f:b8:b8:90:
da:ff:4a:3c:47:14:0c:3a:68:04:3e:1d:9c:09:37:04:3b:8b:
2d:be:e2:09:39:fa:bf:90:40:2e:25:ce:2b:37:78:06:6a:56:
7f:6f:51:b5:98:47:f9:2a:a9:61:2f:91:42:8a:6e:18:2d:bf:
3f:67:33:96:a9:df:16:f3:a1:a7:12:0c:d9:2c:e2:a7:ed:23:
79:97:53:41:ba:fe:af:36:5c:11:bd:0e:7f:7c:e5:18:31:30:
bc:2a:68:08:9e:1d:ed:ac:dc:ad:38:11:c2:db:21:76:6c:17:
f9:29:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:22 2026 by rpki-client