
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
File: c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa (raw, json)
Hash identifier: FqbbfWSVORAXqWvunsxGvhrIssrrENGes8X7FLvM/m4=
Subject key identifier: BA:A6:5E:38:EC:3E:AF:B1:C7:03:25:43:64:14:81:57:0E:30:D8:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A407C11280D93234B9280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396571
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:40:7c:11:28:0d:93:23:4b:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=9d5ae032-cc6e-4574-a31c-4d2249ed141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:a5:75:eb:34:83:91:2e:99:76:af:13:7b:
d2:96:9a:97:33:80:2b:9e:9c:42:20:c3:98:57:39:
de:e4:96:97:1e:46:45:4f:fb:dd:7b:e9:a3:3d:ab:
d3:a6:cd:8f:52:f5:20:79:62:8e:c7:81:6a:27:f9:
a7:2c:82:4a:a5:fc:d8:b3:07:1a:d6:9e:5b:8d:ed:
ee:af:22:b7:45:d3:0b:4f:c8:31:d4:a3:6d:b5:e0:
de:bd:4d:ba:fd:9e:d7:c1:f8:5d:0c:1f:74:6a:5a:
31:19:1a:cb:f4:57:5e:dc:73:81:81:03:9c:82:76:
74:56:17:a5:92:96:75:f5:ea:f5:b4:b6:03:8f:2a:
05:91:5c:d3:62:7b:fb:33:d0:39:1d:20:54:85:de:
49:a3:ac:62:4b:6b:89:f9:e3:e5:cf:cc:b8:31:61:
3c:5b:83:33:84:e7:76:da:76:81:98:4e:87:a4:ba:
bf:6a:e4:ec:5c:23:7c:c2:52:d4:79:f3:70:c3:44:
bb:7c:b4:22:af:0e:01:66:a7:17:5d:26:96:66:27:
05:c2:47:04:b9:2a:c8:6d:da:29:a7:99:24:ef:f0:
87:1f:de:0a:3d:51:b2:4e:23:fc:5e:90:4e:13:dd:
9d:59:66:68:c0:b2:2a:75:43:76:05:58:34:aa:20:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:5E:38:EC:3E:AF:B1:C7:03:25:43:64:14:81:57:0E:30:D8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:60:18:9f:e3:9a:44:ad:b7:f2:4f:88:bc:69:e2:2e:31:82:
f5:78:ba:7e:34:e7:2f:56:71:70:6b:63:bd:98:ad:96:1c:50:
12:0e:e1:ad:0a:5c:83:b5:0c:ed:1b:7a:50:6d:35:19:1e:12:
05:99:41:99:10:31:fd:0c:c0:8c:b5:d9:4e:49:7c:c2:e5:6b:
ca:86:d4:1a:8f:2b:30:2b:ad:6e:19:de:3e:e8:bb:d5:2d:7d:
18:f9:7f:af:68:16:b4:a4:95:8f:8e:96:b6:5f:51:73:7f:41:
b0:dc:74:e9:70:b0:b6:5d:1e:59:e1:18:e9:53:cf:7c:0d:89:
8d:37:b3:e5:f9:3c:5c:af:51:67:67:18:11:3d:ad:80:38:f1:
ca:d9:59:73:32:3b:0e:7a:04:b2:44:f1:e6:b2:91:ca:25:f3:
90:27:22:12:35:a5:b3:3e:9e:75:78:58:48:65:e9:d3:cc:05:
db:ba:c7:7a:5e:74:9b:8a:65:08:e6:73:83:52:f5:a5:3e:24:
0e:da:ed:b9:d6:65:c2:5c:85:32:38:0c:cd:ad:19:84:b4:ea:
c7:75:b4:13:85:3e:0b:5f:25:fa:2b:e7:ac:07:75:7a:65:c3:
9d:69:91:c0:69:c4:ca:6c:e5:13:a3:cb:40:79:47:f5:30:ed:
9a:12:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:14 2026 by rpki-client