
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2877319-10d3-38eb-a264-691a4d46d9a3.roa
File: a2877319-10d3-38eb-a264-691a4d46d9a3.roa (raw, json)
Hash identifier: KmWb7twHK1QW192X07yHaTvuKlo+hRPT4sNNZn3dvgU=
Subject key identifier: B2:2D:47:86:C5:5D:2A:44:3A:AD:1F:2D:13:B5:3E:6C:A2:43:1F:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CDB0207D7DD028C4310FD7300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2877319-10d3-38eb-a264-691a4d46d9a3.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 36624
IP address blocks: 2001:503:39c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:07:d7:dd:02:8c:43:10:fd:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=ce1d0f2f-c430-47e8-94d4-2f4d30282ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:92:18:03:63:0a:7d:04:cc:70:be:06:7e:
cb:65:c1:e4:87:38:f8:09:c3:bb:d4:78:12:4c:cb:
50:6c:f9:66:d2:98:bd:3b:a3:5c:17:a0:15:59:e8:
f4:ad:b2:cc:e0:29:1f:b9:d7:12:c6:f6:2e:c2:26:
05:13:1f:c4:bc:ba:f8:17:62:50:29:27:24:19:55:
3a:f7:22:04:3b:2d:7c:c5:95:c5:05:60:d7:1e:80:
d8:5b:22:6d:fa:b3:4c:55:6d:fa:bd:67:3e:29:4b:
a6:8f:66:34:0f:04:8b:21:17:27:15:ad:ec:7c:5a:
53:e8:bd:a6:25:ce:62:61:4d:7e:ab:98:13:3e:c3:
97:60:65:6d:38:20:f3:a5:49:b1:b7:d1:b3:39:76:
a5:b9:73:76:d2:ee:0c:8d:43:e7:81:c0:3b:62:fd:
17:50:89:1e:a3:5c:16:6a:0d:28:2f:30:6f:b2:bf:
27:a9:34:4b:44:45:af:e9:f2:47:6f:07:9f:bd:ce:
b9:be:50:da:62:30:e8:23:c2:5b:d8:47:70:7c:03:
ad:93:9b:47:dc:e8:76:cb:7f:17:25:31:32:34:72:
51:bd:6e:1d:0b:22:d9:60:06:09:45:7c:87:44:be:
9c:05:44:88:6d:eb:08:4b:0f:54:fe:02:de:e9:20:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:47:86:C5:5D:2A:44:3A:AD:1F:2D:13:B5:3E:6C:A2:43:1F:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2877319-10d3-38eb-a264-691a4d46d9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:30:2c:5b:f4:a1:a8:8f:34:5d:fb:e9:82:0b:a8:61:44:d0:
d6:b0:0c:1e:6f:bb:6e:2c:22:71:f4:bf:4a:40:45:a8:45:b8:
b8:f8:54:de:18:14:cf:8b:35:f6:a7:cb:95:dc:24:b7:eb:32:
87:9f:35:2f:07:67:73:3d:56:68:15:2f:1e:34:82:68:ca:4b:
db:e6:84:e6:38:0e:13:5a:01:ca:9a:3d:7a:cc:3f:66:1c:ed:
d3:ce:fe:22:9b:45:ff:c6:d7:32:77:31:c4:b0:5d:89:fc:23:
dc:2c:cc:9f:73:0a:9a:af:c3:e4:96:88:68:2e:6a:e7:ab:09:
17:e5:44:cf:ca:c2:fd:de:8f:22:6a:93:4a:cc:16:5b:bb:87:
af:f3:45:1a:8d:ee:ba:2c:96:d9:74:16:23:e8:0f:f7:2a:56:
ae:08:cd:d5:f7:c1:9d:60:9b:32:5b:82:0d:0d:b2:91:a0:92:
6f:9b:46:6f:7a:e7:2c:ae:29:bd:ac:57:45:80:20:1d:28:2f:
e3:6a:78:11:48:72:2b:ad:a3:c9:dc:d6:be:30:52:d3:a5:dd:
05:c7:48:b2:5b:cb:a5:35:3b:93:bb:b3:22:8a:04:0c:30:96:
6d:9c:78:6a:1a:eb:8f:8f:5e:73:33:32:36:80:9b:66:48:93:
a2:7c:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:19 2026 by rpki-client