
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0ac5b-a8de-3adc-8820-2d1c843c9702.roa
File: c3f0ac5b-a8de-3adc-8820-2d1c843c9702.roa (raw, json)
Hash identifier: oazoLpsaGwf7I0Q0PnsvS9q05CdYyKnNIhzIj6XowDk=
Subject key identifier: 73:19:1B:8A:1B:07:85:49:78:A8:73:A9:1F:17:93:E1:88:8B:2D:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9A4B8E2350CDA937B4B7A6A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0ac5b-a8de-3adc-8820-2d1c843c9702.roa
Signing time: Thu 23 Apr 2026 14:28:18 +0000
ROA not before: Thu 23 Apr 2026 14:28:18 +0000
ROA not after: Wed 22 Jul 2026 14:28:18 +0000
asID: 27544
IP address blocks: 2001:503:a83e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:4b:8e:23:50:cd:a9:37:b4:b7:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 23 14:28:18 2026 GMT
Not After : Jul 22 14:28:18 2026 GMT
Subject: CN=25ff979c-ba55-4dfa-8f5d-574ea9cead11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:0b:81:05:d8:f5:19:e5:c6:8c:31:1b:ab:
b6:6b:fb:05:02:69:f2:31:71:52:71:9d:a5:99:b3:
e2:2b:48:c9:0d:94:11:90:b8:93:ec:8c:d4:75:ce:
61:94:b0:d5:86:a4:36:c6:c9:f1:99:50:7b:2b:7f:
0c:e0:19:a6:19:26:22:d2:ca:03:57:a4:2d:49:95:
fb:20:14:bb:c4:ff:f2:13:c2:dc:43:15:92:fb:a8:
1d:90:1b:dd:77:4f:84:03:9d:c4:f0:9a:61:0d:89:
99:0b:93:fc:9e:92:e4:e4:0a:79:9b:e1:b2:c4:46:
1e:09:b6:b5:f2:9e:c9:da:66:63:71:52:75:e7:6e:
86:a1:1a:88:c1:04:db:43:7d:a8:aa:72:ab:03:d5:
27:10:fc:53:92:de:0d:1e:9a:c8:3c:73:9c:68:fd:
76:54:cb:61:23:5b:6a:a2:a6:01:b0:ba:80:09:82:
87:df:04:92:04:ca:3a:94:17:0b:e2:d3:a0:0f:97:
21:ae:5c:da:57:63:24:df:7a:5a:d6:c9:3c:1a:5a:
64:e6:b3:73:2d:9d:ce:40:26:05:48:f3:8d:80:c3:
48:a7:b5:d0:2f:66:01:04:46:74:bc:a7:e8:48:e6:
b7:c3:6a:fe:82:12:2f:0f:87:34:9d:af:f6:d5:c0:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:1B:8A:1B:07:85:49:78:A8:73:A9:1F:17:93:E1:88:8B:2D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0ac5b-a8de-3adc-8820-2d1c843c9702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:a83e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:de:83:46:b6:13:e5:f2:3f:f8:fc:17:24:ef:61:9a:ee:55:
66:5d:ad:de:33:36:49:6b:47:29:80:20:bc:8f:6c:a4:2c:49:
49:98:a7:46:1f:10:f0:ff:09:9a:27:62:ed:39:52:ea:75:d5:
f3:57:3e:63:7d:c6:8e:33:dd:72:4d:24:a3:59:4b:0e:59:fc:
0f:32:9e:61:ea:22:a0:36:f5:26:3d:cd:ff:98:69:58:96:9f:
ed:35:c8:5f:97:ad:cf:b8:0c:1e:d9:3f:42:e0:38:c4:d7:20:
c2:62:82:cc:7b:81:10:b7:41:bc:38:49:0a:1d:78:1e:76:1e:
c3:ff:94:96:57:8d:aa:4e:30:63:b7:24:ad:b7:10:36:ea:99:
f8:a0:2d:77:c6:af:57:24:6d:a1:b3:9c:41:f9:79:da:1a:90:
88:ba:25:a9:76:07:5b:2c:ad:93:28:a5:25:de:14:7d:18:b4:
1b:9d:e2:a6:26:53:e1:4c:db:ce:2b:4e:51:f7:50:c4:da:de:
4a:91:ce:be:ef:24:24:ea:4a:bf:63:b2:57:d4:09:76:1f:6d:
38:85:2b:b1:59:6c:08:97:b3:06:a3:2d:09:38:1e:b4:45:c3:
a0:56:8e:94:55:31:8c:8c:22:33:33:d6:a8:10:db:5b:0a:03:
9f:b7:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:05 2026 by rpki-client