
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
File: 470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa (raw, json)
Hash identifier: zwEU/qTJ+jdv1spxpT+yrDBHU5TaBmpVkEHJQZ73yro=
Subject key identifier: F4:FC:F4:50:8C:00:BD:A6:A1:47:14:9C:F2:73:6D:A8:ED:7A:60:3B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0BDD1A974E617E24783E3D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 396587
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:1a:97:4e:61:7e:24:78:3e:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=21d8ad10-4a6d-48aa-99d9-2d840e0712b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:ee:4b:c7:05:c9:34:f4:7c:0d:b4:49:b1:
c0:37:81:86:b9:27:57:39:0d:5d:54:bf:a0:b9:11:
bd:ea:06:c4:00:bd:c7:17:e3:36:bd:53:a5:f1:5e:
ec:98:d1:95:f0:ee:0b:ee:17:e6:c1:c9:76:5d:10:
3d:67:17:bc:77:87:09:82:a2:dd:c5:47:ba:02:05:
dc:c6:c6:57:c2:29:5e:95:5c:11:53:d4:e1:c4:93:
6c:69:87:a7:5a:80:e3:ed:db:d2:25:b8:c1:d7:61:
3a:c5:3e:6f:92:b6:c0:9a:3c:37:2f:87:2c:04:f1:
f5:60:a1:19:42:5e:8f:23:33:f6:b5:89:47:de:18:
b8:4f:72:9f:45:aa:9a:4a:25:29:32:b7:47:3b:69:
78:2a:1b:82:12:87:a9:78:d7:09:e6:66:5d:e4:d9:
63:d7:32:a5:a0:2f:b6:41:da:25:d6:96:18:a9:32:
60:c4:0f:ea:69:d9:8c:8e:1e:05:9a:eb:d2:7a:9e:
90:41:0d:d3:b8:c2:16:d6:33:8c:29:be:ad:5b:e8:
ba:8c:05:0e:8a:42:8f:35:80:e3:2c:09:5f:21:0d:
5c:b9:7a:09:b3:c4:e5:de:71:28:d6:84:33:a5:d2:
d8:0c:4f:65:45:b6:7f:80:44:99:d3:f6:5b:68:85:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:F4:50:8C:00:BD:A6:A1:47:14:9C:F2:73:6D:A8:ED:7A:60:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470d5fd7-d5ed-3474-855a-4aeabeba3a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:9a:ae:77:41:90:28:a3:06:9e:70:67:68:43:a2:e2:e2:38:
70:cc:21:0f:87:67:8f:12:b6:6a:5d:e3:8e:95:b4:67:91:c7:
6b:3f:20:2c:b8:61:3e:a2:d8:f0:cb:85:86:ec:5d:50:ca:fc:
73:8a:04:04:e2:21:2c:b7:2c:f3:48:e1:11:b3:52:72:54:32:
e3:6c:97:cc:0e:63:45:eb:89:3c:4a:69:e4:04:92:29:2b:4f:
7d:5a:92:66:a0:18:69:93:17:c0:d3:a0:81:c6:01:41:03:4f:
11:95:b7:27:8f:e6:d3:fb:18:a3:0c:7e:cc:2b:12:24:ca:4c:
51:f0:b8:5c:e7:f5:bf:82:f1:4c:32:81:9a:c5:fc:27:6a:3e:
68:9d:f6:a0:3d:a5:29:05:d4:4a:b5:d4:61:61:a3:03:13:69:
ed:a2:78:45:d8:26:36:93:76:13:d3:19:20:74:8c:e8:bc:9d:
e4:26:e8:f8:fb:95:2a:df:81:35:8b:86:d6:66:b0:92:3f:01:
ca:dd:c2:eb:84:5a:c5:fd:2d:82:37:7c:a6:3d:05:58:31:ac:
0e:26:ac:9d:20:35:38:80:74:fa:14:75:d7:0f:45:24:63:1c:
c1:7b:d9:b4:6f:d9:93:9d:b6:ff:06:24:59:0b:6b:bb:8c:4a:
22:9d:62:03
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RqXTmF+JHg+PUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
MjFkOGFkMTAtNGE2ZC00OGFhLTk5ZDktMmQ4NDBlMDcxMmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnfuS8cFyTT0fA20SbHAN4GGuSdXOQ1dVL+g
uRG96gbEAL3HF+M2vVOl8V7smNGV8O4L7hfmwcl2XRA9Zxe8d4cJgqLdxUe6AgXc
xsZXwilelVwRU9ThxJNsaYenWoDj7dvSJbjB12E6xT5vkrbAmjw3L4csBPH1YKEZ
Ql6PIzP2tYlH3hi4T3KfRaqaSiUpMrdHO2l4KhuCEoepeNcJ5mZd5Nlj1zKloC+2
Qdol1pYYqTJgxA/qadmMjh4FmuvSep6QQQ3TuMIW1jOMKb6tW+i6jAUOikKPNYDj
LAlfIQ1cuXoJs8Tl3nEo1oQzpdLYDE9lRbZ/gESZ0/ZbaIX99wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPT89FCMAL2moUcUnPJzbajtemA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDcwZDVmZDctZDVlZC0z
NDc0LTg1NWEtNGFlYWJlYmEzYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCbmq53QZAoowaecGdoQ6Li4jhwzCEPh2ePErZq
XeOOlbRnkcdrPyAsuGE+otjwy4WG7F1QyvxzigQE4iEstyzzSOERs1JyVDLjbJfM
DmNF64k8SmnkBJIpK099WpJmoBhpkxfA06CBxgFBA08Rlbcnj+bT+xijDH7MKxIk
ykxR8Lhc5/W/gvFMMoGaxfwnaj5onfagPaUpBdRKtdRhYaMDE2ntonhF2CY2k3YT
0xkgdIzovJ3kJuj4+5Uq34E1i4bWZrCSPwHK3cLrhFrF/S2CN3ymPQVYMawOJqyd
IDU4gHT6FHXXD0UkYxzBe9m0b9mTnbb/BiRZC2u7jEoinWID
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:36 2026 by rpki-client