
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33507527-76d7-30e2-bad5-8f3ebd3b80f7.roa
File: 33507527-76d7-30e2-bad5-8f3ebd3b80f7.roa (raw, json)
Hash identifier: Zz4O3TrIYML/R8fnex09uN7rEZBFvcv/cr7zcgH7zGU=
Subject key identifier: E3:26:4F:34:7B:F9:57:9E:6D:68:AC:DB:C5:43:A5:A5:02:A5:44:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F759BB91FF8D9104F28DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33507527-76d7-30e2-bad5-8f3ebd3b80f7.roa
Signing time: Tue 10 Mar 2026 14:28:36 +0000
ROA not before: Tue 10 Mar 2026 14:28:36 +0000
ROA not after: Mon 08 Jun 2026 14:28:36 +0000
asID: 396596
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:9b:b9:1f:f8:d9:10:4f:28:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:36 2026 GMT
Not After : Jun 8 14:28:36 2026 GMT
Subject: CN=c783b57a-e3da-4b18-9963-0dca0f07f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:25:e1:55:dc:55:e5:2f:00:ee:d8:d4:5d:
77:57:33:ac:04:e1:36:ad:da:5e:3c:b9:2b:ce:5e:
c3:78:ef:0c:d0:94:a4:51:a7:1a:56:e9:fb:bb:5c:
25:ba:05:0b:39:53:0a:1c:96:7c:94:cb:59:f9:b7:
1f:7d:0c:28:be:58:a5:9a:61:0f:67:c5:3b:fe:d0:
f5:2b:d2:4a:af:a1:28:d2:53:a1:d1:7f:b0:62:ec:
9c:a8:8d:14:9a:1d:c8:94:cf:51:28:c8:fd:e3:c4:
3e:b8:83:2a:ff:23:4a:f2:35:78:02:03:f8:b5:5d:
7e:e3:5a:d4:89:fd:25:c5:2b:1c:13:ae:d0:b5:98:
c4:c1:7e:95:ce:14:5b:9d:99:d8:27:30:c7:38:93:
2b:99:2b:ef:75:13:dc:bb:71:f7:09:bd:65:18:24:
8e:6a:ff:9f:6a:44:1e:97:70:36:6e:c7:ed:19:cf:
c8:d1:ff:0f:e0:ac:f3:62:25:bd:ab:98:50:cf:4e:
b4:53:b0:cd:b3:cb:ca:23:80:27:e0:3b:76:c0:ba:
68:09:53:32:d7:ab:47:a7:72:7c:d0:88:f3:ee:73:
3d:c6:6a:87:dc:f9:58:d7:69:a3:4b:17:d4:95:e3:
31:f3:cc:9d:79:9c:7d:a7:f1:b6:f8:fd:42:91:aa:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:4F:34:7B:F9:57:9E:6D:68:AC:DB:C5:43:A5:A5:02:A5:44:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33507527-76d7-30e2-bad5-8f3ebd3b80f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:9b:23:0d:52:62:fc:a7:c5:b3:0c:ce:26:b2:73:a0:86:fa:
f9:03:58:b3:c1:fd:da:e5:36:4d:1b:13:76:08:0c:93:77:aa:
85:8b:cb:43:05:09:0c:ea:5c:e1:e5:92:ee:61:17:48:50:55:
a8:d0:f8:17:56:6b:62:41:b6:eb:0e:fe:53:32:bb:a5:a7:6f:
ac:14:a0:fd:18:41:fa:f9:b7:fe:05:85:21:0d:02:b6:c7:de:
aa:81:13:a1:2c:b7:e7:67:25:2b:75:27:92:ad:be:a3:de:77:
ef:e8:0b:ce:f3:1d:53:18:ce:c9:d1:24:a4:89:cb:12:39:64:
1f:34:96:5f:6d:59:83:26:4f:1b:17:c1:82:3a:80:30:4f:00:
38:57:49:2b:66:2e:73:4f:01:15:5e:87:67:ac:99:eb:65:c9:
1a:96:34:c0:af:d8:61:73:13:2c:43:8e:36:bb:a6:82:e9:51:
70:83:84:29:23:a7:4b:72:9a:fe:fc:a3:17:0b:eb:88:e9:e0:
a6:81:f6:ec:20:d0:e9:c8:0e:e1:25:6e:d4:35:64:40:8f:bc:
d6:69:57:48:03:a0:dc:73:c7:2c:4b:0b:7b:c8:e4:36:ea:9f:
e0:33:42:80:5b:57:a5:d8:8e:25:a7:1c:b8:67:c7:09:b4:c6:
9f:e9:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:14 2026 by rpki-client