
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa
File: d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa (raw, json)
Hash identifier: h/omYXt5uckcyq4UTJP+aedxjDB7l7LpXzUt2sxGBYU=
Subject key identifier: 82:6B:FA:5F:20:47:8F:E5:62:17:27:9E:A4:86:4D:7E:B0:3F:BD:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D143D64769F8AD82FD5AF12B8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 397193
IP address blocks: 2001:503:ba3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:64:76:9f:8a:d8:2f:d5:af:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=edc12953-7f31-4179-98a1-9323a5034892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:0b:fe:c4:5b:9f:9f:cd:48:63:9c:1b:09:
ba:fd:5b:07:92:c5:7d:55:e7:4b:fd:5e:94:37:cb:
6b:96:c1:1d:af:c9:0f:f3:6f:c5:c7:61:6c:de:a2:
39:84:5e:74:9d:ca:92:ab:36:9c:42:78:87:36:4d:
96:9d:55:24:e2:54:2a:89:eb:d3:6e:85:c2:55:2d:
fb:92:88:54:be:55:51:2d:88:10:bd:47:cc:36:4a:
77:e5:e5:06:78:5c:7b:7f:6c:1d:c7:e9:22:00:4d:
2f:57:99:29:d5:86:e5:17:83:19:64:eb:fa:dd:9d:
43:36:05:8f:da:4c:90:fe:b8:fd:bd:be:2c:e1:2c:
de:2c:e8:0b:aa:cd:b7:1a:85:2d:ba:59:f9:23:cd:
f5:89:be:0b:b5:69:77:4c:68:c4:ed:b5:15:e0:19:
7a:d2:e4:e2:aa:7f:5f:d3:7d:63:d2:24:53:e0:9a:
25:8e:c2:b4:41:61:59:3d:2c:d1:78:90:78:3e:b7:
df:d7:e6:f2:13:cf:f2:cf:40:44:00:5c:61:66:3d:
3b:56:25:d6:2c:e6:26:f0:30:b5:12:20:cc:3f:05:
9f:d8:a8:ec:b6:cd:f0:95:fc:da:2e:27:94:66:5c:
fc:ce:35:8f:70:e9:15:c4:be:4b:b3:40:a0:c6:58:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:FA:5F:20:47:8F:E5:62:17:27:9E:A4:86:4D:7E:B0:3F:BD:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ba3e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:d1:f4:b9:a1:f3:4e:08:b6:72:86:3d:7d:df:fd:62:84:30:
2f:f3:94:40:d8:00:ea:da:13:93:eb:cc:3d:d6:3a:2a:75:e7:
9b:97:c4:32:e8:db:28:1b:49:ad:c3:28:87:0d:42:18:4c:b8:
b1:4f:dc:a5:2b:04:b2:c7:ec:31:d3:af:6d:1e:5e:7c:e2:0a:
a8:c5:d9:16:ed:29:99:b9:8f:00:bc:51:dd:a1:45:16:82:f0:
52:0b:a6:7c:85:9c:30:ed:ee:a2:1b:14:37:45:0a:c4:9a:a0:
f1:59:7c:07:11:eb:87:2f:fe:db:c2:80:46:bc:a1:56:31:34:
67:20:1a:a0:7f:e8:c6:4b:1e:1f:d6:d4:54:4f:bd:be:34:33:
23:6d:02:3a:36:9a:f0:7f:52:92:7d:4b:17:9b:d0:45:16:51:
39:7c:2c:13:3e:b2:66:8c:ee:d3:89:16:f4:a0:63:ad:a0:96:
bc:e8:9d:dd:b1:d6:15:5b:7e:f6:35:a2:0c:e4:c5:07:60:85:
bf:31:96:72:f1:13:e8:5c:90:9f:27:29:c5:0f:e1:f0:b4:af:
d1:ac:55:ea:09:c2:a8:c7:7c:27:2d:16:9c:ca:27:7a:fb:3c:
80:89:87:15:a4:0f:39:da:16:f1:d4:2b:e8:28:2b:97:c3:ea:
d1:72:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:42 2026 by rpki-client