
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b963b68-9cc9-3254-ab52-a93478e0f4a7.roa
File: 0b963b68-9cc9-3254-ab52-a93478e0f4a7.roa (raw, json)
Hash identifier: j9Viw2JSEM5vsFoc1au3RX6q6KDwMiaZ8oiJDX0eKw0=
Subject key identifier: 65:80:9E:CB:00:3F:48:B0:48:B8:BB:C0:76:C0:6E:DA:32:C9:E4:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DAAE02EC5056C9B1B8ACE78A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b963b68-9cc9-3254-ab52-a93478e0f4a7.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 396541
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:2e:c5:05:6c:9b:1b:8a:ce:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=5d35f721-369e-45a6-8b7f-6c6f354b1a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:44:3a:06:00:df:3b:b2:48:a4:2e:2f:67:
76:5d:46:93:2f:12:ed:7b:52:3d:a5:3a:d3:f9:cc:
8c:f3:ff:12:86:ba:e7:e5:e3:82:d9:5c:c3:b7:2c:
be:a2:a3:9c:fc:b6:36:87:f2:33:d9:77:07:25:65:
5e:be:29:51:e5:27:48:f0:04:6d:1a:cb:76:00:1d:
96:9b:5a:f9:eb:69:5e:b6:1c:54:90:c0:74:c2:b7:
24:d0:df:e7:4b:73:44:a2:8f:87:e5:86:7e:85:56:
43:b7:4a:4b:2b:77:3e:ea:e1:7b:d7:c8:ef:d6:f8:
f6:dc:30:e9:2a:7a:23:e0:be:f5:79:04:14:db:4e:
be:a0:25:ee:38:62:92:98:3f:5c:15:88:74:e1:55:
95:8a:94:6b:3c:cb:ca:0d:69:6d:df:8f:a8:76:7b:
24:12:04:6d:a8:9d:3b:62:62:d3:a0:fc:0d:37:e4:
4c:00:1e:48:5b:34:80:b8:7b:07:da:1d:c9:fe:6b:
da:66:a5:17:16:0b:3f:18:c2:83:61:41:e7:81:fb:
f3:64:ce:de:d0:3f:fc:57:90:a8:54:9b:6a:a3:f0:
a9:e3:a2:2e:01:af:9c:50:13:4b:eb:08:04:f4:a8:
52:18:b8:84:30:9e:aa:09:12:d4:0e:62:f4:ab:dc:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:9E:CB:00:3F:48:B0:48:B8:BB:C0:76:C0:6E:DA:32:C9:E4:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b963b68-9cc9-3254-ab52-a93478e0f4a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d8:e3:ea:31:fc:5d:f3:9f:14:36:98:63:9d:2d:16:db:b8:
a6:ba:fe:c1:fb:31:54:bb:0f:5b:cb:89:96:d1:57:c9:0b:51:
11:b6:a4:48:45:bc:54:93:e4:4d:1a:3c:20:dd:b6:4f:12:3f:
3e:39:f9:5a:55:c0:d6:b1:0f:ca:fe:a5:e2:39:c4:b2:39:94:
e9:13:28:51:66:88:0d:c2:1b:59:4b:4b:c6:de:1a:eb:59:87:
25:50:d9:6a:41:51:04:3e:74:3c:a7:c9:3d:9f:69:c7:72:36:
1b:70:c1:6b:9f:55:d0:67:cf:0c:5a:d5:3c:d0:ea:05:ec:56:
5c:e4:55:c9:ec:e9:bd:28:17:50:4d:05:cb:7a:ba:03:95:db:
3e:c2:ff:6f:85:ea:e8:38:df:0d:78:d8:c1:1b:ed:46:9a:0e:
d5:90:d9:b9:29:4e:14:09:d2:3d:35:5f:25:8c:09:1a:4e:5a:
91:73:78:c7:26:71:98:52:f2:ce:20:f5:00:fc:5f:e0:88:12:
35:62:aa:45:fd:0e:56:67:3d:16:a4:5e:c2:57:fd:30:dc:d9:
ee:b6:77:eb:73:c6:52:53:31:82:bc:1c:e3:83:73:06:13:2f:
bc:27:9f:9b:24:21:5a:ad:40:0d:cd:81:ce:df:c2:45:46:fb:
8a:ad:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:07 2026 by rpki-client