
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c46a4c-0297-388c-adfb-f00564f9ba5f.roa
File: 79c46a4c-0297-388c-adfb-f00564f9ba5f.roa (raw, json)
Hash identifier: gn9sXo6jtE+iWSm5boI+wQvo4cMmztVJ/bcWQZHYp+c=
Subject key identifier: B6:5C:D6:E3:E6:41:F9:3B:39:40:C9:5E:E2:58:D3:A4:F5:9B:01:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0C036C5347E1E846AA025E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c46a4c-0297-388c-adfb-f00564f9ba5f.roa
Signing time: Tue 03 Mar 2026 15:18:10 +0000
ROA not before: Tue 03 Mar 2026 15:18:10 +0000
ROA not after: Mon 01 Jun 2026 14:18:10 +0000
asID: 396580
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0c:03:6c:53:47:e1:e8:46:aa:02:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 15:18:10 2026 GMT
Not After : Jun 1 14:18:10 2026 GMT
Subject: CN=a93c02eb-7f43-4bd8-9019-38a49979abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:0e:55:8f:17:47:03:21:ee:a9:37:fd:9f:
bd:4b:6c:ef:03:66:d4:48:1b:b9:d5:3a:52:5c:69:
87:24:da:7e:ab:e7:92:8b:9f:5a:b0:b9:40:17:bd:
81:82:ee:e8:c5:70:a3:82:3d:8b:9b:91:b9:38:82:
62:72:50:3a:2c:ff:87:c6:41:1d:d4:a0:8b:bb:ea:
af:c6:4c:8d:aa:50:65:e6:fb:0f:cc:d4:38:59:fa:
8b:41:4a:dc:28:c4:50:c4:8f:c9:f4:ea:1c:5e:c0:
85:8a:20:93:ae:4d:6b:c0:87:a5:95:5b:b8:43:64:
1d:9c:f4:0b:be:7e:11:44:a3:b5:2f:84:d8:91:1b:
47:d6:0c:fb:da:30:e0:95:c1:cd:a5:7f:8c:7b:1e:
c2:a3:56:ba:e2:c1:62:90:1d:69:a1:a3:98:53:e8:
7b:2c:a2:84:7e:83:13:eb:91:7f:f9:5a:9e:ef:f6:
5d:2e:d4:58:94:36:c1:a4:ea:83:e0:7a:c0:00:32:
d6:14:39:42:6f:cb:af:64:aa:ad:b0:45:12:b7:db:
35:fd:23:41:49:d2:03:bb:48:9d:1c:ac:8a:76:74:
ef:5a:27:ce:19:33:2b:39:f5:ad:42:65:e9:d6:b9:
ba:d5:9e:55:69:44:ac:ec:f9:f3:c8:40:b6:88:46:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:D6:E3:E6:41:F9:3B:39:40:C9:5E:E2:58:D3:A4:F5:9B:01:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79c46a4c-0297-388c-adfb-f00564f9ba5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:cc:af:58:fb:1b:94:d8:ca:fe:a6:95:47:39:7f:b0:f9:9b:
13:ad:ce:eb:85:18:15:ff:88:d2:e5:78:aa:58:b7:33:33:dd:
eb:14:b3:65:11:b5:44:a7:c0:8c:c2:52:69:a7:9a:bc:8c:54:
a9:20:be:0e:29:13:5d:28:45:25:08:57:c0:4d:24:da:5f:1d:
1a:61:33:2c:b3:74:f6:b6:d4:ad:e6:5a:0d:f2:f2:18:9d:02:
02:56:b6:e3:16:75:3d:91:55:29:06:40:c4:b7:40:80:2e:a5:
cd:27:ae:04:0a:0f:f0:e6:44:52:51:45:58:fb:c4:2a:2f:74:
c6:31:d6:74:f9:85:6d:24:f0:42:38:84:69:5b:3d:7d:01:9f:
92:c3:66:8d:94:16:2c:24:3e:88:0b:03:87:e2:11:fa:c2:bd:
46:1f:90:7c:27:de:a4:7a:8f:1d:81:f6:29:f1:f6:0b:a2:0e:
2e:26:7d:12:b9:d4:fa:8f:2c:06:5e:57:d8:d2:e2:c9:e3:46:
06:84:dc:be:18:15:e6:a6:6a:0f:98:3a:67:79:df:e2:a9:1b:
f8:da:3b:2b:da:f1:a6:47:b2:d2:2b:53:2a:a9:58:17:57:b1:
8f:0a:43:a0:5a:79:9e:b8:d3:ee:97:b5:53:56:a6:cd:72:51:
ca:cc:5e:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2xTR+HoRqoCXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk
YTkzYzAyZWItN2Y0My00YmQ4LTkwMTktMzhhNDk5NzlhYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIoOVY8XRwMh7qk3/Z+9S2zvA2bUSBu51TpS
XGmHJNp+q+eSi59asLlAF72Bgu7oxXCjgj2Lm5G5OIJiclA6LP+HxkEd1KCLu+qv
xkyNqlBl5vsPzNQ4WfqLQUrcKMRQxI/J9OocXsCFiiCTrk1rwIellVu4Q2QdnPQL
vn4RRKO1L4TYkRtH1gz72jDglcHNpX+Mex7Co1a64sFikB1poaOYU+h7LKKEfoMT
65F/+Vqe7/ZdLtRYlDbBpOqD4HrAADLWFDlCb8uvZKqtsEUSt9s1/SNBSdIDu0id
HKyKdnTvWifOGTMrOfWtQmXp1rm61Z5VaUSs7PnzyEC2iEYStQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLZc1uPmQfk7OUDJXuJY06T1mwEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzljNDZhNGMtMDI5Ny0z
ODhjLWFkZmItZjAwNTY0ZjliYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL7Mr1j7G5TYyv6mlUc5f7D5mxOtzuuFGBX/iNLleKpYtzMz3esU
s2URtUSnwIzCUmmnmryMVKkgvg4pE10oRSUIV8BNJNpfHRphMyyzdPa21K3mWg3y
8hidAgJWtuMWdT2RVSkGQMS3QIAupc0nrgQKD/DmRFJRRVj7xCovdMYx1nT5hW0k
8EI4hGlbPX0Bn5LDZo2UFiwkPogLA4fiEfrCvUYfkHwn3qR6jx2B9inx9guiDi4m
fRK51PqPLAZeV9jS4snjRgaE3L4YFeamag+YOmd53+KpG/jaOyva8aZHstIrUyqp
WBdXsY8KQ6BaeZ640+6XtVNWps1yUcrMXqA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:00:35 2026 by rpki-client