
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5145da-bf13-3192-aa11-ec3799526c4b.roa
File: ea5145da-bf13-3192-aa11-ec3799526c4b.roa (raw, json)
Hash identifier: C3G6BHhsiJ2KkUoAh1MubGFU/8H+RHkI0ikSXzVHgyU=
Subject key identifier: 1A:82:22:05:BD:5F:98:36:6E:01:83:FD:95:8F:4C:25:12:AD:A3:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A305B63BFD01147DBA748
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5145da-bf13-3192-aa11-ec3799526c4b.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396622
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:30:5b:63:bf:d0:11:47:db:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=2adf9058-65a6-4801-aa52-8ff14c2b687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:be:cd:9c:75:72:3c:30:7f:69:d9:26:4b:
0d:ba:1b:b3:02:45:28:a6:dd:f6:89:0e:ca:8d:e5:
17:72:b5:30:06:7a:0c:29:27:47:03:3c:5d:74:49:
9f:ec:b2:4f:b1:2a:a7:03:09:cd:a1:c7:9f:74:e7:
64:60:85:d6:41:d0:37:f2:1a:d8:9c:f4:18:69:b2:
da:72:8c:da:13:0d:67:db:4c:04:05:6b:61:ae:f5:
70:d3:fd:07:9a:90:a3:9a:ab:c7:d3:90:94:57:59:
14:a8:ba:0d:03:15:41:f9:be:13:89:27:a9:8a:31:
33:0e:3d:ab:eb:09:14:03:fd:41:6a:e6:ed:3f:e3:
1e:a2:73:82:08:58:e5:53:c7:53:af:9d:2f:6f:04:
8e:72:61:10:5a:85:6a:e9:da:83:08:de:b1:6f:8c:
f9:03:58:a4:8b:d1:40:83:32:eb:d5:a7:d6:14:14:
4c:0f:66:b6:2d:c7:d7:16:dd:a5:4a:d0:90:ea:15:
cc:3d:f9:f5:b1:87:d3:74:3c:93:b1:0a:0d:19:a6:
bd:29:b5:4b:4d:23:36:1b:a7:a4:a2:06:1f:0d:77:
24:6b:e7:f3:0e:6b:c0:78:e7:43:84:50:c6:d3:dd:
af:17:64:17:ae:6a:b9:da:33:28:0e:c3:a8:20:4c:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:22:05:BD:5F:98:36:6E:01:83:FD:95:8F:4C:25:12:AD:A3:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5145da-bf13-3192-aa11-ec3799526c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a9:16:6f:41:cf:4f:14:21:1f:d8:8e:f5:4c:4e:2d:5c:81:
7f:8f:5e:64:e7:fe:ba:91:5c:9a:99:25:cb:1c:a8:e8:88:f1:
03:0e:7d:f6:42:79:bb:ce:3c:26:52:17:dc:3a:85:d6:58:b0:
43:8e:89:e4:18:b1:1f:d0:ab:52:cc:cf:fc:8a:81:76:82:5a:
1e:dc:e8:ee:5b:80:81:87:b6:69:78:fe:ae:14:65:c8:30:58:
c2:1a:3f:eb:89:ef:da:71:10:9b:1f:18:c8:b7:af:9d:83:04:
43:89:6c:fb:eb:68:13:08:14:ee:07:25:9a:39:4a:19:5b:62:
f7:16:44:60:40:7c:21:bc:77:20:31:9d:99:48:ab:05:95:90:
60:a2:b5:25:54:a5:38:08:95:07:e5:40:6d:32:dd:1b:cb:c4:
eb:5b:32:f5:67:5f:f1:ab:da:94:e0:52:cd:ef:45:5a:1f:15:
06:76:a4:19:8c:b7:05:90:37:af:51:61:fb:ec:74:5b:15:2c:
68:45:98:14:07:fb:5f:48:b3:0a:ab:dc:d0:d2:0f:4d:34:f0:
93:d4:f5:1c:fe:dd:fa:e8:41:d3:d7:84:a6:79:41:1a:d1:f5:
fc:76:bf:5f:a3:10:b0:44:85:2c:58:84:fa:c9:96:1d:91:ec:
e4:58:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:58 2026 by rpki-client