
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42490b64-2e2e-3976-b8b7-abda985fd7c1.roa
File: 42490b64-2e2e-3976-b8b7-abda985fd7c1.roa (raw, json)
Hash identifier: KTsdDvfWM5ZGG7lZOG30Wd5WtnBWEqMKxQtP4dFE5RA=
Subject key identifier: 07:17:74:6D:61:2B:D8:B0:DD:BC:F8:AA:6B:90:DB:FD:F2:54:B5:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D32F5A9BA7555FAA7D00D9FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42490b64-2e2e-3976-b8b7-abda985fd7c1.roa
Signing time: Tue 17 Mar 2026 14:06:58 +0000
ROA not before: Tue 17 Mar 2026 14:06:58 +0000
ROA not after: Mon 15 Jun 2026 14:06:58 +0000
asID: 32651
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:a9:ba:75:55:fa:a7:d0:0d:9f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 17 14:06:58 2026 GMT
Not After : Jun 15 14:06:58 2026 GMT
Subject: CN=82da1fd3-0c4a-40e2-a5bc-51ab128b304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:1f:55:ca:86:13:21:b8:2b:a0:2a:7e:e7:
09:d4:6d:3f:d5:7c:0d:5d:0d:d8:a4:56:c3:8a:15:
c8:a5:d4:3a:ca:ad:74:52:40:82:39:5d:95:b0:8f:
95:e1:7f:89:fc:de:d7:db:a4:eb:1c:f6:de:54:bc:
34:67:e4:27:8b:27:80:b5:3c:c3:f7:d1:42:32:ab:
e2:d4:3c:f0:a8:f9:3d:84:52:04:54:9e:21:02:1f:
2a:00:21:b2:e4:b7:49:45:e8:85:73:e0:5d:51:c1:
6d:fc:da:1f:c1:12:ae:0a:d9:d8:f7:4d:cb:bc:3f:
14:a4:3b:60:eb:89:3c:ae:cf:1d:28:9e:b6:08:81:
e0:76:a8:8d:0f:f7:8a:37:d4:1a:a2:2a:e5:ee:aa:
1b:68:4b:5e:da:c1:26:21:55:af:b9:29:9b:e8:d9:
6d:68:cb:5a:68:8f:b7:45:b1:e1:76:62:63:6e:12:
51:80:3c:c0:6b:55:d5:14:d1:24:d5:88:1d:3b:c8:
2d:28:a9:c6:6e:07:e6:69:ab:89:e5:fc:ef:d3:02:
d6:2c:09:09:de:17:a0:3d:7c:69:62:d7:e5:d4:64:
ea:82:e6:c9:75:af:72:fe:ce:ac:fc:91:94:56:9d:
9f:fe:00:d8:bb:00:61:81:94:e6:cc:eb:1d:6e:3b:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:74:6D:61:2B:D8:B0:DD:BC:F8:AA:6B:90:DB:FD:F2:54:B5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42490b64-2e2e-3976-b8b7-abda985fd7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:9d:78:e0:d3:aa:ef:85:65:71:ca:0e:b0:56:c8:09:bd:8c:
8b:30:62:af:56:c1:3d:2f:5c:45:3c:2a:8a:cc:32:94:9c:51:
39:40:38:5b:02:41:14:9a:b5:54:59:6b:65:ee:45:4e:ab:53:
b2:4c:6c:51:c8:db:2c:79:53:33:15:a0:2b:38:84:cc:84:7c:
f4:09:a8:e7:66:a2:cd:2f:5f:26:6d:38:80:5f:55:f3:b6:1f:
f1:17:b4:ad:71:24:3d:50:3f:18:1c:36:4b:8b:5c:1c:d3:6a:
b7:f0:5b:ee:56:68:3b:25:7a:ce:cf:92:08:e5:2a:4e:b5:fd:
15:d5:16:5a:8e:d2:a5:90:d7:7f:4d:8b:b1:8b:cf:eb:e1:da:
73:c1:8b:2e:96:5e:5b:5f:64:08:ce:29:a9:ba:17:51:1e:11:
dd:e6:55:90:49:c7:78:62:b1:ad:ad:91:6d:8f:b2:6c:69:6a:
10:4d:1b:ed:a4:1b:85:40:8c:5c:89:01:fe:66:f2:e1:02:40:
47:ef:ea:6c:ef:9c:33:32:3a:59:d6:c2:e9:67:0f:4e:ef:0c:
47:1f:d4:dc:75:13:bb:d7:10:8a:9e:a6:e4:28:7b:f7:04:96:
2d:c1:70:17:26:81:a2:c4:eb:5f:e1:91:f3:9e:5c:fe:57:60:
0e:fd:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:56 2026 by rpki-client