
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8725a0-8fe7-32a4-974a-7a1c4b48bbe4.roa
File: 4f8725a0-8fe7-32a4-974a-7a1c4b48bbe4.roa (raw, json)
Hash identifier: 2vAKBNgO5H1Lh8h2XKgPa859aXgl/YFbx10JFaqf9Bg=
Subject key identifier: 35:63:27:1A:81:54:EF:0D:18:CB:19:00:07:FF:08:7E:36:F4:6E:1E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D932557EF2CB13E57FF4E7A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8725a0-8fe7-32a4-974a-7a1c4b48bbe4.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 396560
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:57:ef:2c:b1:3e:57:ff:4e:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=97f33bca-6175-476a-9c8a-cafaddbf75bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:b5:b3:06:a8:d3:f5:80:6f:e0:d7:27:4d:
df:e8:3d:af:17:06:86:dc:d6:4d:39:2b:05:d5:47:
52:86:a2:e9:3d:79:10:e4:a5:ab:67:a8:c5:04:36:
32:97:05:da:4d:35:04:ac:59:87:7e:39:ba:5d:eb:
1c:ad:81:67:ed:29:25:59:9b:f7:e7:23:01:b9:4d:
6a:d0:26:2d:6a:65:13:15:11:bd:84:11:bd:c7:5d:
e6:a3:61:01:eb:52:d2:a3:34:88:c4:1b:c3:d5:ca:
05:9f:0c:ad:28:48:58:d5:82:26:15:d7:7d:70:c8:
7e:32:d3:4d:20:e9:69:46:1a:21:65:a1:6a:e0:67:
f8:65:52:8c:22:ae:8a:0a:55:4d:3c:32:69:94:d5:
78:c7:29:fd:bc:f6:70:c6:0a:f1:1e:f0:28:dd:b7:
e2:23:1e:8e:80:c7:e5:30:37:6d:9b:44:c0:9b:7e:
d0:3a:c7:b1:df:87:8b:60:17:3c:7a:79:0c:f7:22:
4c:6c:f0:90:7c:41:10:90:c0:04:32:49:17:a2:c8:
ec:4f:4d:2e:c6:e0:62:9b:1b:0c:94:48:cf:4f:d6:
a4:b1:63:e8:12:a3:3f:27:e8:b4:8e:6c:76:16:8f:
c1:61:b4:8f:6a:36:7a:5d:ff:e5:e2:ee:5c:55:47:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:27:1A:81:54:EF:0D:18:CB:19:00:07:FF:08:7E:36:F4:6E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8725a0-8fe7-32a4-974a-7a1c4b48bbe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fe:f1:6e:33:e9:83:90:18:58:9b:6f:c2:c9:da:8d:7a:62:
bd:ed:02:a6:7d:97:85:77:c4:84:0b:23:ba:e1:b0:9e:68:72:
d1:cb:ef:f5:20:1e:ee:72:18:9e:51:a2:7a:01:8f:43:0e:5c:
f9:d6:02:90:69:fa:76:da:de:b7:3f:1a:e6:17:9c:64:3c:f8:
86:58:93:04:1a:16:35:54:98:b9:77:6a:e1:ee:37:92:f0:65:
4d:f4:6d:e4:84:d9:a9:a7:90:01:03:fc:32:b2:b3:94:33:b9:
ae:a6:2d:74:ea:41:74:aa:6b:40:63:5d:46:de:c5:de:41:1d:
d4:39:9b:16:78:1c:04:e6:11:52:8f:ba:93:7f:91:06:ad:7c:
e6:b5:4e:f3:c9:58:e9:62:6e:a9:2f:6f:58:45:d6:e6:4b:6d:
1f:fa:20:8c:69:92:3e:01:bd:0e:f3:12:7d:24:6f:2c:00:11:
74:3e:15:43:52:cd:75:37:7a:08:19:f0:85:c7:d3:aa:4e:bb:
b4:37:da:36:f5:8d:ae:3f:8c:c2:c5:7c:75:41:eb:4f:4d:46:
ed:d0:61:f3:cd:4b:13:bc:ec:e5:fa:e7:44:bd:7f:b1:c0:e8:
ca:f5:02:a0:eb:54:f7:c5:86:ba:3b:cf:98:76:d7:4f:e6:8d:
e5:a6:04:a7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2TJVfvLLE+V/9OeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
OTdmMzNiY2EtNjE3NS00NzZhLTljOGEtY2FmYWRkYmY3NWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutS1swao0/WAb+DXJ03f6D2vFwaG3NZNOSsF
1UdShqLpPXkQ5KWrZ6jFBDYylwXaTTUErFmHfjm6XescrYFn7SklWZv35yMBuU1q
0CYtamUTFRG9hBG9x13mo2EB61LSozSIxBvD1coFnwytKEhY1YImFdd9cMh+MtNN
IOlpRhohZaFq4Gf4ZVKMIq6KClVNPDJplNV4xyn9vPZwxgrxHvAo3bfiIx6OgMfl
MDdtm0TAm37QOsex34eLYBc8enkM9yJMbPCQfEEQkMAEMkkXosjsT00uxuBimxsM
lEjPT9aksWPoEqM/J+i0jmx2Fo/BYbSPajZ6Xf/l4u5cVUfpYwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDVjJxqBVO8NGMsZAAf/CH429G4eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY4NzI1YTAtOGZlNy0z
MmE0LTk3NGEtN2ExYzRiNDhiYmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCd/vFuM+mDkBhYm2/CydqNemK97QKmfZeFd8SE
CyO64bCeaHLRy+/1IB7uchieUaJ6AY9DDlz51gKQafp22t63PxrmF5xkPPiGWJME
GhY1VJi5d2rh7jeS8GVN9G3khNmpp5ABA/wysrOUM7mupi106kF0qmtAY11G3sXe
QR3UOZsWeBwE5hFSj7qTf5EGrXzmtU7zyVjpYm6pL29YRdbmS20f+iCMaZI+Ab0O
8xJ9JG8sABF0PhVDUs11N3oIGfCFx9OqTru0N9o29Y2uP4zCxXx1QetPTUbt0GHz
zUsTvOzl+udEvX+xwOjK9QKg61T3xYa6O8+YdtdP5o3lpgSn
-----END CERTIFICATE-----
Generated at Wed May 13 09:52:49 2026 by rpki-client