
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e5f11b-998d-3c5f-9028-e39dd94f7d7f.roa
File: 32e5f11b-998d-3c5f-9028-e39dd94f7d7f.roa (raw, json)
Hash identifier: nkHLN1Xi9P9/WemR0Ufd6ktjSBa+rzRyYkpPtI48mbU=
Subject key identifier: 28:E5:E9:BB:1B:E1:F1:A4:A8:ED:78:98:1E:3B:6E:32:72:C0:0F:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D00B29C5A0F258A1871998DD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e5f11b-998d-3c5f-9028-e39dd94f7d7f.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 397201
IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:9c:5a:0f:25:8a:18:71:99:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=caf123ac-a93b-4fa9-94a4-fc59c657e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:a6:d0:8e:ed:bf:e5:6b:4d:1b:98:d8:60:
35:4f:0f:d8:bc:cf:ec:e6:09:bb:7d:ef:fa:bf:90:
b6:8d:18:0b:15:dd:b3:cc:7a:ec:dc:ad:29:ba:8d:
61:f7:0b:b4:29:76:fb:bb:48:61:53:de:6b:c9:fb:
1a:ad:04:46:59:bb:b7:20:a3:8b:ed:ad:e2:d3:83:
1f:e2:41:ce:c9:73:2e:03:a3:15:1a:8a:d1:71:47:
8b:2a:87:48:95:d6:73:ef:97:1c:9e:6d:29:31:c2:
8f:a0:71:37:fb:d7:c4:bb:03:d9:11:80:a9:fe:0a:
da:93:85:c2:81:50:28:c8:23:40:e9:74:4f:7e:d0:
7f:e6:19:e3:ca:22:2d:9d:98:33:84:cf:e3:a3:56:
25:f2:8b:db:e2:7b:08:99:25:a9:93:54:87:ba:26:
e7:7a:7a:f3:45:ab:74:56:9d:a4:77:01:ee:f5:14:
a7:80:5c:fd:d6:98:09:c8:c3:14:1a:f3:59:c5:3c:
0f:e7:5b:d4:66:53:9b:46:14:6f:d9:a5:ca:ee:3c:
a6:98:6b:f4:05:f7:0a:71:f7:26:83:ac:31:00:91:
d9:d8:ec:05:e7:9a:25:96:1e:4a:a3:e1:93:07:ac:
82:e3:cf:36:3a:7e:38:3d:57:b5:6b:82:75:5f:2a:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:E9:BB:1B:E1:F1:A4:A8:ED:78:98:1E:3B:6E:32:72:C0:0F:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e5f11b-998d-3c5f-9028-e39dd94f7d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ba3e:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ca:f1:fb:7d:a0:66:ed:5a:09:77:19:59:3a:cd:b6:b1:89:
49:3c:ce:be:ea:a1:4d:4e:0e:1a:1d:76:aa:d0:df:f4:d8:40:
7a:e0:64:9d:d2:98:79:84:d2:d1:b0:ff:cb:30:cb:1f:33:72:
1e:34:8d:d2:73:d8:75:de:ef:54:b1:f9:44:de:2e:ed:53:b1:
62:4d:42:89:ab:b2:b8:23:bd:fc:ac:9b:d5:69:e2:ab:e5:34:
a3:d0:af:4d:49:9c:80:77:42:ca:b6:04:43:3c:d8:79:49:00:
b2:d8:24:81:40:38:86:8e:47:45:d9:58:ab:f3:8e:1b:b3:17:
40:43:65:0d:fa:9f:67:df:20:60:89:66:43:08:46:e7:9f:fb:
55:d2:20:51:90:4d:8a:6d:cd:c1:b0:64:bc:fe:17:ee:42:b7:
0b:8b:5c:cc:64:41:96:8e:7e:2d:50:1d:32:59:ba:b8:9a:f9:
f1:f7:5c:e2:99:b2:e0:97:9d:b1:82:c8:ba:f8:cc:0f:42:6a:
b8:69:1a:ce:dc:9a:87:7b:ac:0c:fa:98:50:e7:f2:bb:d5:0a:
5a:a3:94:a0:69:f3:28:25:c8:b7:2e:50:88:90:95:36:f5:3c:
50:82:7e:79:60:8a:35:46:95:62:24:da:c9:d6:f3:82:1f:1d:
1f:b3:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:01 2026 by rpki-client