
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2b72ad-447a-30d2-b62a-131fdd777863.roa
File: bb2b72ad-447a-30d2-b62a-131fdd777863.roa (raw, json)
Hash identifier: 0e8ic+RVlqd40l2zUdQsKRarcEloWFSOpzVsRZuGMbE=
Subject key identifier: E3:74:C0:10:54:9E:DE:E4:90:E8:92:1A:D3:1C:3E:0D:EC:CB:79:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D24E133BD564715DAE4E46F98
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2b72ad-447a-30d2-b62a-131fdd777863.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 396603
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:33:bd:56:47:15:da:e4:e4:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3b092c59-9476-47ee-a46e-7d8502d7393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:bd:a1:ce:31:c5:f1:04:9c:f2:47:46:b1:
12:a1:5a:5f:11:26:8b:83:fb:15:65:aa:96:10:76:
2a:80:e7:d1:7f:c3:c6:db:df:7a:b2:06:7c:9b:7c:
94:07:04:85:5a:8f:ed:01:eb:68:a0:a5:b7:91:90:
6e:74:72:d3:60:d9:bb:19:42:1b:75:a0:fd:65:40:
02:5a:0c:63:6b:bb:ca:a4:b2:42:c7:d6:38:57:94:
2b:be:57:3e:20:cf:18:8f:c8:9f:ac:92:fe:5e:7a:
cd:cb:11:ec:9a:4f:e1:1f:e8:9b:58:23:68:e2:5b:
ec:45:e7:e8:e6:88:2b:4d:bd:4d:8f:3a:22:03:37:
c9:45:38:4b:8e:22:95:99:64:24:8e:3f:26:b0:b8:
89:de:42:26:b4:e5:66:bd:0a:bb:48:b0:ee:7c:f7:
bb:9e:09:17:89:6f:c3:bb:f1:63:16:91:4b:20:95:
f9:4f:e4:72:2e:05:e3:df:1c:32:c0:9e:49:4e:0a:
09:15:7f:43:89:fd:9c:10:9c:d6:7c:dd:61:48:29:
7a:bf:fb:58:dd:e3:2d:88:a7:22:e2:e8:ff:61:19:
56:86:13:36:98:91:af:71:33:e3:bc:ec:43:3b:3f:
73:ae:17:83:a1:65:4b:3d:51:61:1c:e2:8e:a2:16:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:C0:10:54:9E:DE:E4:90:E8:92:1A:D3:1C:3E:0D:EC:CB:79:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2b72ad-447a-30d2-b62a-131fdd777863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:96:92:c4:97:27:16:02:c1:69:90:e6:5b:4b:45:b3:c8:a5:
44:3f:2e:f5:3b:aa:1c:af:38:a0:84:47:ae:70:8c:14:aa:a1:
8e:1c:03:28:60:66:82:db:cd:da:5a:c5:b5:32:3e:ac:6a:6a:
db:1e:9e:d9:58:c8:71:51:bd:ca:08:d8:c4:e3:67:f1:67:2c:
7b:ad:f2:f2:e9:d6:75:63:cd:25:1d:99:c8:91:04:10:6b:c6:
ce:2d:87:3e:88:b9:f9:42:c6:60:62:6a:c1:68:1b:37:d5:78:
bb:31:e6:04:b5:58:ad:74:a3:55:2c:4b:bf:a8:44:51:9b:0f:
6a:72:5f:49:40:80:c7:9b:08:9a:0e:af:fb:97:87:5b:1c:7b:
9f:74:5a:bb:8c:3d:25:4a:02:cb:02:bf:4f:37:6f:a0:a5:77:
fb:2b:6f:5d:13:5c:87:56:56:2b:b8:d4:a4:fa:f1:ad:4f:56:
cf:69:bd:6c:25:a1:65:08:41:82:37:59:e9:1d:3e:ff:29:76:
1d:71:2a:71:18:52:15:1e:ca:46:e1:c2:86:41:93:f7:0b:ec:
25:72:83:bb:73:f9:7a:18:ba:fc:45:18:5e:ca:7b:9a:2f:b2:
bc:8c:9f:ce:49:72:88:ae:0c:e8:8d:80:3c:bf:57:9a:7d:6b:
7d:2a:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:12 2026 by rpki-client