
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa
File: 505f44a6-7c87-3dda-9cc5-9238b86db84d.roa (raw, json)
Hash identifier: tdJUOfMOCd6IZ44PTpNbk4PKKo6RWs2LqgkSGIjHGo8=
Subject key identifier: CF:8F:CD:2A:6C:7C:37:39:06:73:EB:DF:D1:F6:A3:BE:E3:E5:D6:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D97555F929D01B5DB51598000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa
Signing time: Wed 22 Apr 2026 13:00:32 +0000
ROA not before: Wed 22 Apr 2026 13:00:32 +0000
ROA not after: Tue 21 Jul 2026 13:00:32 +0000
asID: 36625
IP address blocks: 2001:500:7967::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:97:55:5f:92:9d:01:b5:db:51:59:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 22 13:00:32 2026 GMT
Not After : Jul 21 13:00:32 2026 GMT
Subject: CN=c3cb1f6c-a207-4d1c-ba93-3cf5bfeed9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:11:c3:74:cc:74:56:6b:bd:ab:77:86:25:
68:a1:c0:2f:54:1f:f6:f1:78:cf:6f:ad:b7:47:6e:
0b:6f:f4:fe:7a:1c:da:41:37:cc:4e:53:2c:0a:ca:
d0:2c:88:e7:11:2e:3f:1a:8c:b6:f1:7d:87:ed:e3:
fa:6e:90:26:4f:b9:9e:40:9e:c6:41:b1:02:51:98:
04:0a:15:b1:b8:71:a6:b7:5d:81:6f:43:0b:a9:46:
39:ab:77:64:13:13:2c:ef:cf:03:ea:4e:61:b4:bc:
b2:41:d4:f4:a1:ee:0d:8a:75:a7:65:89:5e:87:4b:
c8:4b:ee:89:58:f2:d0:18:32:13:ec:01:af:6c:94:
25:12:0f:89:82:c1:f2:ad:a2:7f:46:18:a9:40:51:
9a:c9:4a:3d:09:c5:fb:ff:80:99:10:e6:8b:11:04:
d0:cd:59:cd:de:70:c8:de:9f:14:ff:d3:20:de:26:
aa:7c:a3:d7:cb:f1:94:45:e1:65:9a:16:e9:1d:9a:
c5:56:2f:88:59:6e:93:07:7c:84:26:64:ff:28:f9:
9c:4d:84:71:be:2b:45:b5:6f:46:72:b0:df:8d:9f:
60:f7:fa:9b:12:32:f6:1f:f8:a3:82:77:8e:1c:f5:
c4:43:c4:26:15:8a:dd:13:42:74:79:31:58:17:2d:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:CD:2A:6C:7C:37:39:06:73:EB:DF:D1:F6:A3:BE:E3:E5:D6:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:eb:59:5c:2d:17:37:5e:b2:eb:47:e9:58:06:2f:da:39:98:
d9:cf:d2:f4:d4:f2:9b:1c:08:0b:7c:23:c1:2c:8c:b4:f3:97:
4f:95:bc:de:24:f6:73:c0:75:da:62:4c:9e:23:01:2d:7f:5d:
22:48:96:06:5b:e7:97:84:67:65:c8:6a:c8:8b:54:1d:dd:2c:
92:10:6b:71:d9:e7:ca:2f:75:ab:38:b4:a6:3d:48:f7:59:97:
62:a9:f2:1a:46:47:fb:23:e3:ac:49:58:b7:20:a7:c2:74:e1:
2b:40:eb:15:00:90:fb:39:05:ff:63:80:8e:1f:3c:6e:bd:f6:
53:90:61:d9:ff:8b:b9:b0:46:22:58:a1:5d:0b:1c:56:d3:4f:
c3:39:cc:37:53:55:95:22:6f:b9:f2:8d:ab:84:a7:d0:0c:0e:
e5:8d:1c:9b:67:29:19:4d:46:35:48:4a:59:1c:7c:82:06:2e:
36:69:65:1d:09:45:aa:e7:59:ab:62:15:9f:a2:1a:c0:74:b4:
d0:6b:da:ea:d8:d8:98:55:6d:c0:ef:ef:8b:c3:f3:08:f1:d0:
54:fc:ea:6e:b8:5c:a4:2b:9f:b0:0b:6c:5c:e0:fd:cd:c9:48:
ce:a8:fa:ca:f9:d5:9d:a5:94:7b:64:3d:4f:1e:6b:09:8f:f6:
8e:6d:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:50 2026 by rpki-client