
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa
File: 21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa (raw, json)
Hash identifier: BsxvQxKniIXST1cSv8cC7OnGRqS93IlDb81HuHiV+Q4=
Subject key identifier: AF:08:D2:09:A3:51:3F:9B:C0:D5:FD:02:2D:18:F7:42:E6:16:54:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DBA3B1281432E19936925E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 40717
IP address blocks: 2001:501:b1f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3b:12:81:43:2e:19:93:69:25:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=0f71177a-2a5d-484d-b712-411b53713ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:11:2b:c4:ea:fb:b4:8e:4c:42:86:f6:90:
91:b4:cb:34:dd:1c:7c:03:c0:a1:ef:8f:4a:fe:bb:
19:04:0a:00:07:b3:fd:fd:ce:8e:4b:cd:15:0b:d3:
d1:e5:24:f1:f7:4a:05:61:f3:8b:b3:6e:c5:00:b3:
db:93:c6:98:5c:7d:c9:2e:42:43:da:7d:fc:5a:59:
e9:e9:fb:9f:1b:76:d0:76:54:26:f1:82:93:27:1b:
68:38:4a:4f:5b:6c:dd:96:3d:cf:72:8d:9e:d0:49:
8a:b8:1f:b3:c5:e0:6f:e1:30:7b:08:73:b3:d5:15:
34:1a:8f:41:05:06:94:f2:e3:ae:a2:e5:b2:16:aa:
b0:a0:d2:7f:80:37:6e:ff:54:cf:3a:f6:27:a7:28:
c3:3d:1c:e8:ec:1a:be:bb:c6:72:6a:25:0c:ff:c6:
2e:81:84:b9:4e:be:a0:a8:29:10:7a:6e:cf:b6:2c:
1d:64:5c:23:da:49:a0:de:28:76:94:53:3c:b2:8a:
fe:8c:72:ad:08:72:62:9e:60:f2:07:6b:42:42:5f:
8f:e0:87:4c:7e:d1:f7:20:bf:99:b9:45:b4:e5:01:
dd:56:43:1d:de:85:f3:cf:ff:2c:a3:fe:e3:59:9f:
de:72:4c:34:64:1d:f5:b3:a9:44:c8:35:4e:5a:1e:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:D2:09:A3:51:3F:9B:C0:D5:FD:02:2D:18:F7:42:E6:16:54:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:2b:50:f0:62:e3:be:59:de:ef:0d:22:52:b0:d0:51:16:9e:
df:a3:76:e9:9b:10:b3:2a:2b:4c:52:af:d7:e2:a3:ab:b2:9b:
14:52:b1:33:67:72:fa:4f:3a:f6:c0:81:ab:67:c1:da:7e:6c:
72:22:6e:bb:68:a3:76:db:dc:c9:7d:f6:c0:42:bf:12:b9:0d:
7c:e4:43:96:6d:ec:51:fd:00:bc:b8:d0:9b:2e:a0:7e:61:39:
ad:19:26:3a:d4:08:3b:f1:62:fb:ab:6e:67:25:66:c9:cc:50:
3c:6f:bf:d0:46:75:f2:9a:f7:d7:34:23:2b:00:41:8d:08:a7:
af:e6:55:23:37:da:22:26:4b:b8:bb:85:e6:26:2d:b4:19:f5:
65:cb:19:22:87:a8:81:35:22:e4:1d:c1:6a:b7:dd:a6:2c:18:
ea:d1:dc:a7:58:9a:b4:df:c3:b3:c5:3c:4c:af:8b:d9:21:a1:
85:74:d4:8e:87:dd:42:a3:66:c9:94:7a:ef:1b:8b:ad:7f:a4:
a7:e5:4d:33:2a:c3:a1:48:97:84:cc:26:65:47:bd:79:6c:7a:
3c:f1:6c:eb:67:98:e8:20:20:9e:13:72:45:08:0f:e3:a2:50:
61:11:62:ff:ac:31:fa:3b:b9:2e:8c:60:0b:29:65:b6:ba:3c:
e7:76:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:13 2026 by rpki-client