
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ff0144-fba2-37e8-927e-496471604d23.roa
File: 64ff0144-fba2-37e8-927e-496471604d23.roa (raw, json)
Hash identifier: Q9nLDSOgxJjqUfU8p1iPdbiagsWZzR3Pz2C8qtLMaXA=
Subject key identifier: EE:A9:B2:8D:89:E8:C9:93:5E:38:74:FE:39:C9:05:F0:21:C3:0D:E2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CFDEAA405BDD79556F60B95F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ff0144-fba2-37e8-927e-496471604d23.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 396550
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:a4:05:bd:d7:95:56:f6:0b:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=83aa10f2-7ee7-4e9b-be5b-afbc90e94f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:cb:21:b8:eb:d6:c4:e6:e1:73:54:47:b5:
77:55:e1:de:73:51:ba:08:61:89:6a:fe:c9:23:ee:
f4:1d:7a:84:65:d2:0f:7c:a0:8f:9b:89:2a:76:36:
96:4e:7b:30:e4:ca:85:dc:70:da:fc:b0:e3:3e:50:
3e:2f:af:89:8d:07:01:ad:6a:0d:28:00:2a:04:ea:
9c:d1:19:28:68:bd:e4:dd:7c:67:5a:9e:fd:c6:61:
5b:1a:79:83:13:2f:68:ce:c7:ce:3f:a5:b9:c5:21:
fd:76:8a:57:12:b4:60:59:b0:52:c8:ac:af:c6:b8:
5c:e8:a7:01:04:dd:cb:7b:97:07:ca:92:66:de:b5:
ec:a4:28:bf:b1:c7:d6:1c:bb:27:f1:85:7f:e5:be:
d6:51:23:4f:38:5e:49:10:cb:f9:99:58:fa:39:37:
4c:f1:0f:2a:f2:e7:f0:e8:d5:4f:b2:11:da:db:21:
72:be:23:ee:c3:3a:54:c1:c3:53:59:3c:01:96:ca:
51:1e:62:a8:90:a2:dc:21:1f:99:b0:ba:15:3f:21:
b6:ad:e4:5e:76:9b:c2:43:00:4b:db:fb:c0:ab:59:
a1:e0:e2:0b:2e:e7:9f:49:6d:39:6d:2a:3b:79:ee:
0a:91:b0:35:2b:d9:ea:3f:29:a6:cd:4b:8a:c6:06:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:B2:8D:89:E8:C9:93:5E:38:74:FE:39:C9:05:F0:21:C3:0D:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ff0144-fba2-37e8-927e-496471604d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9d:00:01:0a:12:c9:1f:33:5c:43:1a:18:6a:65:27:2d:b8:
ea:e5:25:89:94:0b:e8:10:a3:78:34:6a:ed:53:6d:00:a9:24:
88:fc:ba:cc:46:92:03:a0:39:18:78:6f:a7:7d:61:dc:3d:13:
41:84:dd:ff:ee:fb:a6:3b:5a:8e:c0:2d:c3:52:92:5b:ec:87:
90:81:23:4d:72:af:98:a5:a7:36:b6:1f:ab:2c:92:d2:e0:84:
67:fd:41:17:a6:bf:5e:86:21:a3:35:9a:55:54:76:20:20:62:
85:4c:fa:45:4a:ed:75:48:7a:10:62:28:53:1f:68:27:0f:74:
77:00:2e:29:90:f9:53:86:26:d7:19:69:ab:76:8e:cf:fd:da:
53:5d:67:5e:87:6f:7b:18:61:70:2c:3b:f0:e0:1d:e3:2a:3d:
9a:3f:69:27:07:99:e2:43:2a:9a:b0:11:68:23:69:ee:c3:69:
05:e7:62:2f:e9:61:db:97:8c:9f:3c:ea:84:49:99:57:ef:37:
5c:2a:97:74:ee:a6:b5:83:24:72:12:5e:12:55:22:8b:9a:c5:
02:68:a2:b2:c2:80:31:05:94:a3:ff:9a:af:9f:65:91:d0:cb:
4b:bc:2d:fb:84:59:de:7f:cd:24:ea:27:d2:11:fc:49:c3:d1:
0d:f6:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:43 2026 by rpki-client