
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa
File: 3f33f70a-fd93-38a4-a886-6f957b5d8274.roa (raw, json)
Hash identifier: bBWXWG+rFIn5kkbO4+JkHQfAZMmxtY4PscXsUhfVtDk=
Subject key identifier: 64:31:C3:05:C6:4F:91:33:60:23:5F:73:B8:F9:26:2C:75:68:53:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E534F4650E185F9AF341DD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa
Signing time: Sun 28 Jun 2026 21:00:11 +0000
ROA not before: Sun 28 Jun 2026 21:00:11 +0000
ROA not after: Sat 26 Sep 2026 21:00:11 +0000
asID: 396549
IP address blocks: 2001:500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:53:4f:46:50:e1:85:f9:af:34:1d:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 28 21:00:11 2026 GMT
Not After : Sep 26 21:00:11 2026 GMT
Subject: CN=5aebd928-b166-47f2-adc4-4a0c7dd182ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:39:ff:a7:fc:3b:c1:c1:39:03:c8:0e:a2:
97:ad:d1:fd:6f:d6:29:db:d2:91:57:a5:dc:56:aa:
e2:c1:cb:5e:b4:48:9d:f5:ef:6b:e1:32:3c:88:40:
b0:f0:8b:21:93:b0:9f:c1:99:ed:ef:52:17:ca:6c:
88:98:3e:f9:2a:ea:78:71:74:89:e5:25:97:00:68:
7c:e4:ef:68:7c:09:7b:1f:a4:d3:a4:fa:41:2f:1c:
df:d7:7a:dd:9e:ed:b3:39:6d:e3:7e:48:6b:8b:bf:
78:eb:7b:1e:a3:6e:c5:a8:9e:dd:af:66:b6:d9:38:
9d:5b:02:7b:e6:1b:ce:9b:35:09:a7:7f:2e:80:69:
cc:e9:ff:f4:ad:b1:36:b4:6a:01:7e:a1:54:d2:7c:
04:7c:1a:70:8e:9d:ac:76:f1:de:a1:e8:dc:d5:1a:
88:7e:2d:0f:6d:b5:98:d6:2e:f1:52:e8:5c:0f:bc:
10:3a:a2:f9:58:8e:cc:0b:bf:c4:77:e1:cf:61:f0:
bd:7b:2d:54:8d:33:83:f0:4f:04:61:91:06:d8:86:
80:ac:6e:22:1c:f7:62:30:93:26:26:00:fb:35:a6:
ba:8e:09:3e:e4:03:30:f6:16:7e:64:76:f8:b4:0c:
f6:a7:de:e8:4c:fe:7f:c2:f8:77:6c:54:38:7f:c7:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:C3:05:C6:4F:91:33:60:23:5F:73:B8:F9:26:2C:75:68:53:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:04:3f:12:9b:d7:34:2c:cf:fb:7b:69:7e:fa:9f:5c:3f:b0:
0b:5f:ce:38:5e:1e:52:18:53:e9:b7:62:93:c9:99:88:2e:c6:
df:38:b1:eb:ab:ab:ad:c9:16:d2:8d:86:c6:ef:7a:1f:0e:12:
74:80:4b:da:b0:b2:05:27:ba:a9:bc:1c:fd:07:b0:6d:56:4a:
cd:19:eb:5b:66:02:74:43:8c:8d:51:fb:9d:46:3b:da:54:13:
96:63:ec:7c:8c:da:b3:99:98:e4:79:22:21:ed:c0:5c:ff:ba:
7a:e8:00:7f:3a:32:cd:b4:0b:a1:73:f0:4f:a0:a9:9d:73:81:
e6:70:de:cc:d3:b7:72:73:7d:47:b9:1b:85:bf:02:42:27:24:
ac:95:07:3a:ce:54:8d:47:ac:32:f8:05:a5:f1:f9:55:07:d0:
ac:e9:b4:ab:29:fa:83:ce:53:23:1d:93:0f:30:85:40:d9:10:
88:7b:a5:4c:79:27:08:aa:73:a4:64:e2:50:fe:67:68:62:fa:
43:09:1c:8d:fd:d6:0f:a4:94:68:c1:51:f5:d4:3c:6d:85:f4:
42:4d:b5:d0:28:8e:a5:fe:47:87:7c:ee:09:61:16:df:2a:61:
45:d9:8e:97:ae:b2:7f:2d:b4:2f:86:c0:b1:c1:70:34:d5:a5:
5b:56:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:04 2026 by rpki-client