
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c4548b-8fce-39ac-b668-b1700dd8bbdd.roa
File: 38c4548b-8fce-39ac-b668-b1700dd8bbdd.roa (raw, json)
Hash identifier: Gl4Sar1qqMEWpWSnv6QjSjsglrv7Gm5T3J/UB3ptFgw=
Subject key identifier: B3:98:47:F9:5A:52:D4:9B:D8:00:22:C2:34:FD:7C:D9:0B:1D:17:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3E001AD55DB327E3A329FB30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c4548b-8fce-39ac-b668-b1700dd8bbdd.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396547
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:1a:d5:5d:b3:27:e3:a3:29:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=bb2960f9-e50d-4393-ac7e-706b78c8095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:32:c6:1f:d4:c8:98:7e:91:fe:74:94:59:
73:0d:a5:3b:0c:4e:5d:66:d9:2f:d2:de:09:d0:d0:
38:ea:09:47:18:8b:90:0e:a1:b3:c8:6f:39:1b:14:
32:1e:f2:8d:df:00:d1:b6:28:5d:59:d6:19:db:72:
f8:42:b2:74:ba:c6:ed:de:a6:1c:aa:37:ae:a9:22:
9d:e4:2f:6d:99:a9:08:79:11:9e:9c:cf:3c:81:02:
cc:f7:c3:8a:bb:7f:1d:15:7c:b4:85:aa:e7:ea:05:
f1:f1:04:e8:a6:ae:80:bb:2f:1f:e2:13:e1:88:c9:
56:ee:d2:9e:c7:10:21:46:4b:df:5c:7a:f1:05:4a:
72:42:0f:26:a4:19:ac:d5:0f:06:48:bc:e3:64:6a:
55:c9:ae:af:72:6a:2f:3a:2c:9c:04:ab:b3:d1:89:
58:ec:3e:a7:41:d6:e9:ef:27:7e:a5:e1:cd:38:90:
13:94:ea:fa:2d:51:60:6a:b2:85:b4:c0:84:31:65:
24:2a:7e:64:d0:e6:d0:3c:c1:9e:d7:ee:f8:86:17:
e4:97:ae:a0:da:95:27:19:6c:c8:46:d0:2f:ff:21:
6f:7b:39:fc:0b:a1:5f:79:05:31:a8:aa:75:7f:32:
58:e6:34:12:c5:70:a5:f5:37:e8:aa:e3:f4:21:64:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:47:F9:5A:52:D4:9B:D8:00:22:C2:34:FD:7C:D9:0B:1D:17:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c4548b-8fce-39ac-b668-b1700dd8bbdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:02:af:81:c0:75:5c:26:a7:83:a1:4a:94:8a:0c:79:64:54:
05:1a:f4:22:f7:27:b9:03:cb:5c:85:c6:3b:0d:90:ab:34:66:
83:04:91:f2:0c:59:f7:b1:31:df:a7:31:b6:de:27:10:14:fe:
9a:3d:83:06:f7:50:a3:d6:d2:1f:d7:eb:30:1c:17:01:63:67:
68:7a:3a:68:35:56:27:82:78:0e:7f:da:f6:29:c4:c9:6b:91:
6e:29:ad:73:e4:81:67:e2:72:08:23:29:29:1b:87:3d:24:96:
b0:03:eb:fb:6d:b6:b8:27:b2:40:7a:74:45:34:90:95:b9:35:
35:29:44:0c:c4:59:64:52:fe:e3:43:12:9a:2e:0c:18:c1:a6:
94:c4:64:83:e8:5c:73:23:d9:85:87:23:df:d3:63:f1:b9:44:
b5:ca:48:7d:1f:dd:3b:0d:bb:8f:20:e2:9c:f5:40:8f:a2:15:
44:01:dd:18:6e:8b:9a:8c:8f:45:32:6b:48:93:fe:68:94:20:
40:7a:9a:60:a0:47:21:fd:fd:d7:38:84:e2:12:27:c9:b6:b8:
2d:5d:e9:6d:4b:62:28:3b:24:e4:7e:59:1a:2d:a2:17:71:84:
1f:fd:c4:bb:75:88:a3:81:bc:21:c1:4b:fc:89:3b:90:bd:6e:
30:4c:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:34 2026 by rpki-client