
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bcadfe0-eb10-320b-853f-4feb56a04511.roa
File: 5bcadfe0-eb10-320b-853f-4feb56a04511.roa (raw, json)
Hash identifier: GqkY9IV1O09BXZKJG+JovP8u4zMnHvLIoC+llW69tM8=
Subject key identifier: 0B:BF:DF:88:1A:13:29:7B:2C:2B:5D:D6:5F:E1:EE:B1:65:7A:43:3D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E640F9B75F995D16673A94CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bcadfe0-eb10-320b-853f-4feb56a04511.roa
Signing time: Sat 04 Jul 2026 21:00:12 +0000
ROA not before: Sat 04 Jul 2026 21:00:12 +0000
ROA not after: Fri 02 Oct 2026 21:00:12 +0000
asID: 396595
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:64:0f:9b:75:f9:95:d1:66:73:a9:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 4 21:00:12 2026 GMT
Not After : Oct 2 21:00:12 2026 GMT
Subject: CN=572cf4af-d3f0-43f9-a6c6-9b5e9eeeeb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:55:a1:3a:c0:ae:de:ae:ea:e1:29:4d:9a:
85:9c:30:aa:f0:c0:b3:ad:1c:63:b9:6c:4d:6a:e5:
01:64:c6:c4:b1:b0:0c:53:ae:29:60:6a:76:1d:6d:
68:8d:f6:62:cf:6f:cc:19:ea:99:19:ab:74:ed:61:
18:97:c6:6a:68:f6:27:f2:fd:0a:42:55:28:6b:cb:
4c:20:c0:07:9a:5a:d6:d7:35:52:1b:c3:04:d7:f8:
31:f5:b4:6f:55:9b:50:f2:e6:2b:13:64:ed:63:c8:
b5:3c:0c:5b:11:75:f7:3d:c9:a5:1c:48:04:01:da:
3f:5c:32:fc:d7:81:03:88:49:ec:68:31:29:30:4d:
17:28:f1:20:ca:4a:72:3f:36:d6:62:9a:5f:4c:87:
1f:4f:52:ea:3d:f4:d2:91:f0:42:b2:bd:a1:cf:fc:
e4:43:3c:f3:ad:4b:3a:3e:41:05:46:b0:7d:85:ca:
0c:64:5b:b1:dd:7b:ba:47:47:ec:ee:91:12:3a:73:
59:7b:f8:ae:a6:c6:cb:2f:fe:ad:18:45:82:08:ed:
db:ef:c5:6f:64:cb:ff:cb:e6:08:3c:40:e4:07:d0:
f0:27:06:2f:82:3a:d8:79:9e:57:fe:0e:ac:84:4a:
82:c9:69:2b:ec:f5:ac:0c:55:42:0a:6d:fd:05:03:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:DF:88:1A:13:29:7B:2C:2B:5D:D6:5F:E1:EE:B1:65:7A:43:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bcadfe0-eb10-320b-853f-4feb56a04511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:36:36:3a:e0:d7:cb:cd:82:30:6f:11:72:0e:b7:95:aa:28:
e0:3e:18:8c:30:8d:f5:74:56:c6:f0:53:98:a9:4c:8e:a9:c8:
49:39:fe:b9:5f:e6:1c:59:1c:8f:29:b7:b0:a1:94:3d:4c:74:
e2:67:05:d2:5c:cc:83:7e:68:c0:9e:5d:b7:00:36:7c:0a:3f:
06:33:c5:d3:e6:26:91:1c:61:de:8c:9b:a7:59:ec:23:f3:b4:
69:50:75:b4:5b:cd:ec:46:3d:f8:c2:fe:d1:5d:bf:ad:91:3e:
2b:14:05:ac:fd:e0:17:8b:0d:a1:ea:51:bd:39:6b:b3:4a:86:
af:20:35:f9:47:07:5a:66:24:d1:c9:ec:02:b2:fb:57:ac:ed:
95:8a:1c:e3:82:8f:ed:f3:40:95:27:f4:fb:5c:b0:16:91:7c:
d2:f9:92:d3:23:1e:a7:27:ba:da:4e:ad:46:07:3c:79:a7:dd:
da:49:97:3d:b9:ea:c6:78:e0:64:34:57:4b:d2:f4:81:e5:22:
37:2e:36:f3:38:83:aa:c9:2e:7e:30:42:88:00:d3:8a:65:ae:
3b:b9:14:ca:b7:06:7d:f5:79:8b:12:c0:70:57:04:de:b2:ad:
a5:92:6e:1a:bc:69:84:14:ed:98:43:7b:cd:c8:b9:09:3d:4a:
94:c3:d3:9b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD5t1+ZXRZnOpTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NTcyY2Y0YWYtZDNmMC00M2Y5LWE2YzYtOWI1ZTllZWVlYjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t1VoTrArt6u6uEpTZqFnDCq8MCzrRxjuWxN
auUBZMbEsbAMU64pYGp2HW1ojfZiz2/MGeqZGat07WEYl8ZqaPYn8v0KQlUoa8tM
IMAHmlrW1zVSG8ME1/gx9bRvVZtQ8uYrE2TtY8i1PAxbEXX3PcmlHEgEAdo/XDL8
14EDiEnsaDEpME0XKPEgykpyPzbWYppfTIcfT1LqPfTSkfBCsr2hz/zkQzzzrUs6
PkEFRrB9hcoMZFux3Xu6R0fs7pESOnNZe/iupsbLL/6tGEWCCO3b78VvZMv/y+YI
PEDkB9DwJwYvgjrYeZ5X/g6shEqCyWkr7PWsDFVCCm39BQO+9wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAu/34gaEyl7LCtd1l/h7rFlekM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJjYWRmZTAtZWIxMC0z
MjBiLTg1M2YtNGZlYjU2YTA0NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBeNjY64NfLzYIwbxFyDreVqijgPhiMMI31dFbG
8FOYqUyOqchJOf65X+YcWRyPKbewoZQ9THTiZwXSXMyDfmjAnl23ADZ8Cj8GM8XT
5iaRHGHejJunWewj87RpUHW0W83sRj34wv7RXb+tkT4rFAWs/eAXiw2h6lG9OWuz
SoavIDX5RwdaZiTRyewCsvtXrO2Vihzjgo/t80CVJ/T7XLAWkXzS+ZLTIx6nJ7ra
Tq1GBzx5p93aSZc9uerGeOBkNFdL0vSB5SI3LjbzOIOqyS5+MEKIANOKZa47uRTK
twZ99XmLEsBwVwTesq2lkm4avGmEFO2YQ3vNyLkJPUqUw9Ob
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:05 2026 by rpki-client