
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa
File: 4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa (raw, json)
Hash identifier: lVfnGE8dsPYMwLh/2dok9UDgDMyef2WWP9KQZdqylok=
Subject key identifier: FC:D1:F4:5A:87:E1:6F:4F:78:20:21:C6:18:62:13:13:B0:59:42:9A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DD0904E83C93CADF22299FC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa
Signing time: Wed 13 May 2026 01:00:24 +0000
ROA not before: Wed 13 May 2026 01:00:24 +0000
ROA not after: Tue 11 Aug 2026 01:00:24 +0000
asID: 396578
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d0:90:4e:83:c9:3c:ad:f2:22:99:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 13 01:00:24 2026 GMT
Not After : Aug 11 01:00:24 2026 GMT
Subject: CN=f7ed2c3f-8bc7-4c62-8dbf-e663aef7c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:50:e2:4f:58:31:92:71:45:c8:00:4b:00:
6c:c6:c3:f2:53:72:68:77:d0:57:b8:5c:9b:de:88:
dc:19:b4:2b:dc:52:1c:fe:d8:79:16:5e:97:4d:ed:
f5:25:4b:5b:cf:93:70:9b:20:26:b8:ba:94:89:65:
0d:dd:21:4a:8c:2d:66:38:68:8b:ac:c9:42:d4:d4:
2d:55:b3:fa:35:9d:96:0a:18:28:ca:57:22:91:0e:
03:a6:66:20:07:7f:be:7a:56:ad:5b:02:99:25:f4:
bf:ef:b9:26:d5:d0:d2:6d:e7:dc:20:dd:c0:22:90:
ec:32:0e:12:e2:03:13:a1:3c:47:3f:77:e7:70:22:
5e:c2:f2:08:39:d0:7e:28:98:c8:96:7d:d2:9d:9a:
22:8c:2d:39:2c:46:a2:93:a7:c3:f4:ad:43:33:35:
2f:49:ad:90:1e:56:76:de:5e:8f:de:af:b6:30:ba:
3b:cf:bf:5e:63:7a:ed:91:f5:8e:ea:f2:fb:f7:69:
14:a3:9e:11:74:a1:46:93:2a:7b:cc:ec:09:48:ca:
e8:2e:07:37:d9:27:22:f2:4d:52:5c:48:07:50:fc:
aa:fd:f8:59:b5:0c:a2:32:f0:42:89:79:e4:fd:e3:
a3:8f:5e:e4:60:a5:8e:1f:8f:22:e4:56:e5:74:ac:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:F4:5A:87:E1:6F:4F:78:20:21:C6:18:62:13:13:B0:59:42:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a2d3f89-6b67-3e54-aaa2-b859726b428c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b5:84:a3:c5:a9:7e:75:00:3b:80:8e:f0:c6:9d:e5:20:cd:
1d:88:b8:87:e9:f9:f6:ed:0c:ae:bd:4f:0b:3d:e9:b1:3a:b2:
7b:e8:55:b4:54:5e:cf:77:b4:f5:d7:0a:57:77:30:dc:3b:70:
b3:85:01:16:59:e4:e5:9f:8c:00:e8:f7:e8:f5:29:2e:b0:7f:
1a:af:ef:e5:ba:79:b6:c7:e7:bb:b5:42:aa:f2:43:1b:8b:c1:
18:91:0d:9f:eb:f0:f3:85:b2:6e:51:08:c2:87:f2:de:46:ac:
05:0d:c5:40:f9:0b:1a:d2:a8:e9:41:01:40:bb:59:06:2e:c2:
83:00:05:5c:1d:8a:fe:73:60:c8:02:36:17:4e:92:80:7e:81:
fb:81:f5:82:bc:5e:74:bb:53:a2:e9:fb:e7:57:80:29:d8:2f:
0d:e3:79:39:a1:7d:a6:40:f1:16:06:6e:d3:76:3f:98:c4:be:
8d:2c:ba:9b:9d:81:43:ad:a2:3a:71:89:b5:8b:6e:d0:db:a7:
63:6d:77:60:c7:25:03:79:02:0c:f0:dc:7f:e3:96:fd:c2:dc:
41:58:b9:8e:d6:7f:a2:4f:68:59:7f:cb:49:39:38:30:0a:9d:
98:d9:e8:fe:bb:9d:3f:96:5b:66:b4:6a:17:5c:b1:05:23:ab:
49:65:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:47 2026 by rpki-client