
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b7a570-b958-3236-96e2-be034134073d.roa
File: 40b7a570-b958-3236-96e2-be034134073d.roa (raw, json)
Hash identifier: llIBye9m/VGi06rqBjxF5Em33KYS8/0ogtjgTGevczg=
Subject key identifier: 10:B6:4B:4B:E9:C1:58:77:43:DE:35:9A:A0:F3:C7:C7:45:6A:FE:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D32F5A9315536E2044C6AC680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b7a570-b958-3236-96e2-be034134073d.roa
Signing time: Tue 17 Mar 2026 14:06:58 +0000
ROA not before: Tue 17 Mar 2026 14:06:58 +0000
ROA not after: Mon 15 Jun 2026 14:06:58 +0000
asID: 396605
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:a9:31:55:36:e2:04:4c:6a:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 17 14:06:58 2026 GMT
Not After : Jun 15 14:06:58 2026 GMT
Subject: CN=3944c578-deb2-41e0-b354-03194bfc1f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:18:37:a4:79:a1:58:07:df:84:19:69:85:
03:8f:e9:f1:06:43:2f:7b:a7:9f:c2:ea:4a:53:61:
d3:4c:51:9a:62:13:2d:bb:bd:d8:e6:dd:e0:d4:d1:
06:52:0b:4b:1f:d7:6c:1f:14:3c:5c:36:1e:2e:c4:
6a:26:eb:5f:da:79:39:82:9f:da:dc:e2:6a:15:13:
59:68:a5:75:b5:12:b6:5a:6c:bd:0a:37:22:50:5a:
af:57:57:6e:2a:ac:97:49:54:ed:ab:bd:c7:a3:b2:
2b:cd:ee:38:6b:4b:72:26:fc:ef:e1:e8:61:bc:dc:
4e:64:2c:d2:56:7c:fd:70:59:a5:3d:cd:c4:ab:8d:
19:c9:91:d3:49:0b:c9:45:7a:9c:93:9e:55:a0:59:
81:b9:f4:08:c8:e6:da:33:b4:d0:68:64:2a:7b:9b:
c9:37:e1:c1:12:0d:72:ec:2d:19:55:b9:e9:98:35:
ab:57:42:da:4f:3c:c0:e5:a9:7b:6d:60:96:73:be:
42:03:c2:8a:e1:9d:15:64:82:be:07:d4:c3:b4:43:
1e:2d:84:a7:1f:0a:49:ef:88:f4:91:12:fd:0e:18:
e6:2e:5a:74:f6:82:bb:9f:94:59:28:ba:e0:4a:57:
40:aa:14:13:7e:e3:80:79:c4:03:51:3a:87:3c:44:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:4B:4B:E9:C1:58:77:43:DE:35:9A:A0:F3:C7:C7:45:6A:FE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b7a570-b958-3236-96e2-be034134073d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:9a:74:a4:5b:77:a0:0b:5e:c1:f3:57:aa:8f:41:33:5d:c1:
82:38:5c:99:fa:82:82:76:94:d5:2a:a2:d7:41:34:a6:e0:06:
6d:19:3d:eb:e8:4f:66:d0:4d:84:9a:18:80:b4:67:1b:2e:3d:
f7:71:78:e4:72:32:fe:a5:a4:f9:ff:55:60:50:79:69:36:3c:
f2:51:42:fb:af:08:ae:19:5b:5a:c6:00:5b:dc:70:5f:41:41:
b2:c1:37:cb:99:c2:9f:14:a1:c6:b9:40:29:37:a5:c4:f8:2f:
1c:67:8e:e0:ee:63:e3:9d:fd:af:51:8d:7e:04:e5:52:a0:8a:
ad:45:cf:19:58:dc:e0:ce:36:78:57:3e:b6:05:17:44:7e:9d:
b4:6c:7d:89:98:ef:ea:27:3b:e0:78:38:f7:c2:9c:f0:c1:d5:
61:76:12:c5:b1:3b:b7:18:42:93:32:fc:4b:86:01:80:89:e4:
19:a1:10:55:f1:27:e7:97:16:c6:68:b3:6a:7f:06:33:ba:aa:
43:69:a8:b0:9c:e1:0c:88:bc:af:a6:5b:47:f4:46:71:a4:f2:
e0:b5:64:ae:f0:40:9c:10:2e:c3:77:a5:ad:72:e4:df:5f:ab:
56:c0:3c:bf:9d:39:e6:56:4f:cd:a3:4b:c5:41:95:66:40:e7:
92:96:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:49 2026 by rpki-client