
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a92550-eeec-3041-bfcd-1096226392b1.roa
File: 42a92550-eeec-3041-bfcd-1096226392b1.roa (raw, json)
Hash identifier: LRRIXdysoMeXvukX2jPQFqppXh4edhgiY9oJJ+gneBc=
Subject key identifier: B9:AB:C5:FC:0A:22:15:D6:FD:C0:68:34:A5:57:56:F4:B6:6F:B3:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D32F5A63EB3716C7BC7A8DFF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a92550-eeec-3041-bfcd-1096226392b1.roa
Signing time: Tue 17 Mar 2026 14:06:57 +0000
ROA not before: Tue 17 Mar 2026 14:06:57 +0000
ROA not after: Mon 15 Jun 2026 14:06:57 +0000
asID: 397201
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:a6:3e:b3:71:6c:7b:c7:a8:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 17 14:06:57 2026 GMT
Not After : Jun 15 14:06:57 2026 GMT
Subject: CN=5a1eff48-0a0d-4bc0-97ad-61328fcca8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:af:56:4f:08:ac:45:aa:ad:31:50:6b:53:
6f:80:17:1f:07:32:81:a5:03:3d:94:89:a4:35:6d:
cd:ab:e1:f8:db:62:68:bf:61:5e:bf:79:5e:8d:3c:
56:06:58:1c:89:15:a7:11:d3:71:2e:a8:8d:d1:04:
94:30:17:a0:0c:8a:8e:6f:e9:2c:a9:3d:26:8d:e9:
32:3d:d9:00:1f:8c:85:f3:ed:8c:fa:6a:ff:b1:5c:
9b:d1:1b:2d:8d:1b:aa:b1:37:e9:47:61:bb:87:f9:
15:3c:8c:68:d2:1c:c2:22:a8:48:ea:54:1a:73:b3:
86:d0:a9:f1:88:d3:06:91:cf:5e:a1:22:ac:c3:7c:
36:d6:df:7b:81:07:16:9b:cb:55:4d:1b:26:31:f0:
c6:38:1c:88:96:20:a7:35:28:1f:f0:8d:50:d9:9c:
a8:cc:a6:f0:d6:af:28:3c:9b:2b:c5:40:a2:bb:f2:
6f:58:1d:8b:c6:c7:5e:12:34:28:66:36:51:7c:a0:
4b:f7:e0:f4:39:28:5e:af:c1:96:db:20:6d:bd:1e:
f1:27:15:3c:dd:4d:e5:b5:d8:49:09:8d:0a:5d:e3:
00:66:c2:83:bf:cd:4f:13:ec:1b:b7:fd:3d:15:c4:
67:82:c2:de:e9:9a:5c:39:e0:f5:a1:aa:ba:e8:19:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:C5:FC:0A:22:15:D6:FD:C0:68:34:A5:57:56:F4:B6:6F:B3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a92550-eeec-3041-bfcd-1096226392b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:7e:04:86:98:4f:0f:7d:78:c8:f0:32:7e:c3:ac:84:88:fd:
a0:7e:6b:89:d9:95:34:e5:98:c3:75:2c:a2:9c:f3:ae:b8:cb:
52:b9:d6:f3:99:07:b1:cd:83:b4:36:36:13:ba:57:e3:0d:90:
a4:d5:e4:3b:0e:c7:63:70:fa:c4:df:74:de:9b:69:6f:f2:98:
e4:d9:8a:e7:32:1d:1c:59:47:97:08:85:b6:f0:36:53:09:1d:
4e:20:ed:9b:d8:68:e8:72:53:9f:a9:ff:07:bb:27:09:57:87:
45:5a:32:9c:ec:ef:04:fc:89:5b:3a:3a:3d:93:34:c8:02:a6:
2b:ea:a9:cf:74:2a:b7:35:0e:d3:17:dd:c5:49:26:01:ad:85:
74:51:bb:a9:31:ec:e0:d3:52:69:5f:ae:f2:01:e8:ae:c3:0e:
f0:dc:7b:9f:4a:75:5c:ed:00:42:3a:58:12:2e:78:e9:f6:65:
37:6e:cd:71:36:8d:29:2d:50:72:09:6d:de:a6:e8:6b:f1:20:
19:52:07:03:46:28:fb:5d:18:08:f7:19:d9:b5:d6:f5:7b:d8:
e9:e8:82:a8:04:fb:65:46:18:7b:7b:ca:13:68:18:67:07:e9:
5d:6f:5d:be:44:cb:f7:46:0c:e3:9d:6f:3c:46:f2:7b:0b:aa:
63:0b:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:41:30 2026 by rpki-client