
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
File: c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa (raw, json)
Hash identifier: asSzTsI9fFdqVTcqsD/k/xGjvlFBF7P/uJckqjQm/wc=
Subject key identifier: 5E:DC:1C:D2:C2:A7:D7:A3:0A:4F:7F:94:E0:31:A8:D3:26:52:2D:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E18AEE9C608CB168E12D59080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 396571
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:e9:c6:08:cb:16:8e:12:d5:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=21a9632b-7725-439a-acc5-6a0573961133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:f0:e7:c6:30:97:cd:5a:b5:02:f5:d0:55:
68:ed:44:44:84:9e:e9:8d:f4:5f:e9:49:97:21:5b:
a7:fe:88:f9:ef:56:3b:80:74:68:aa:5b:20:7b:dd:
23:47:af:4f:14:b5:2d:f6:a9:f2:28:ad:43:f6:4c:
b4:05:ba:3c:cd:1b:71:f6:ff:cf:f2:1b:66:4a:6a:
15:fe:ea:6c:9e:b1:4d:f1:66:bd:ce:91:08:b8:66:
bc:19:02:a5:91:f1:ea:af:b7:73:bb:07:ed:c1:fa:
00:65:84:c4:be:9f:60:e8:10:82:dc:32:db:35:d8:
fe:3d:a5:ea:48:08:e5:b3:3b:58:d3:d5:a6:ab:08:
92:4a:ac:3d:cf:08:f5:60:a4:06:98:31:3e:62:26:
5f:93:a9:1d:a4:35:99:d0:77:81:4c:01:8c:42:b8:
3b:76:ce:7f:41:07:02:fa:eb:42:4c:4e:51:b1:26:
6f:33:0a:10:3f:d8:22:e5:18:fc:68:5c:19:68:60:
15:06:7d:37:d4:a7:d1:c6:94:b5:0b:22:bd:7c:0d:
4f:e1:b2:58:f6:be:41:22:51:11:c3:fc:01:a3:b5:
fa:75:c6:8b:2d:1f:4e:e3:9b:b0:b9:8a:6f:b4:8d:
68:cb:fd:9f:0e:b9:15:43:a2:e6:0d:09:c3:d2:f1:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:1C:D2:C2:A7:D7:A3:0A:4F:7F:94:E0:31:A8:D3:26:52:2D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:59:a3:cf:54:ec:95:37:01:e7:58:5e:41:b0:46:8a:3d:23:
e9:2c:3a:25:ea:76:87:e7:ce:8d:38:3d:1f:05:8d:c2:b0:23:
b7:6d:eb:6e:d7:d7:9c:64:e7:d2:06:b1:6d:46:70:d1:4b:ea:
c8:fa:49:b5:70:ac:71:d4:99:0f:b2:45:ac:c4:fa:a5:0c:24:
b8:d8:52:1b:74:e8:da:51:4f:79:c2:9f:6d:9f:0a:d4:58:72:
68:c1:fd:50:2f:e6:76:6b:e2:69:f5:9c:03:5c:ac:04:7d:e8:
59:46:c1:22:a5:1d:9c:87:21:4e:1f:21:2c:69:f3:cf:75:0d:
b9:ff:59:2a:6b:fb:de:e6:a8:8e:d8:9c:d5:0e:82:b3:96:6a:
cb:a2:70:cf:ff:08:f5:17:6e:b9:c8:12:61:04:2b:8b:d4:1d:
3a:f2:ec:f6:d0:e0:54:18:03:f6:fe:6f:ed:ca:de:25:ec:6a:
81:a2:48:13:b6:5a:e8:80:ab:8c:b0:5f:5f:ea:ea:54:96:49:
27:e6:8b:bf:53:16:01:66:dd:18:af:58:04:d6:5d:d0:86:c1:
95:af:2b:31:14:6b:16:c0:99:82:66:e1:47:04:ab:1c:f9:fe:
b7:4e:3e:47:06:b6:44:d0:8b:76:c3:0a:4d:3e:ca:8c:d7:ba:
33:1a:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:48 2026 by rpki-client