
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa
File: 821fc637-901f-389b-a543-7673ce7660ba.roa (raw, json)
Hash identifier: /H4vuOoF4wc2oq+8WYPAWp/fzQeWUf6CUIGlkV60FOI=
Subject key identifier: 6B:71:A4:47:BD:83:F8:2A:57:38:D8:B7:13:52:9E:5A:77:05:68:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DAAE05009748DC17D25DBB680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 397209
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:50:09:74:8d:c1:7d:25:db:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=fede2585-58ff-4565-ba4c-90853eec689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:93:07:22:0b:b0:a9:52:cd:af:c4:36:6a:
65:13:73:17:36:2a:f4:82:dc:d1:22:fc:43:96:2d:
9a:f1:bf:b4:5d:97:bb:ca:3c:48:c9:61:08:8c:88:
48:dd:f9:56:44:43:49:13:66:ba:cd:4e:d6:81:68:
db:c0:3b:7d:9d:6a:3d:33:0c:0f:7e:8a:b2:00:9e:
67:b4:13:ed:3e:c8:0b:56:a9:b1:3b:49:c3:a6:c0:
c6:7c:fd:97:81:9d:db:73:1b:60:e1:db:06:bf:f2:
56:75:eb:9f:55:8d:0f:58:60:9d:ca:07:8c:61:22:
bb:61:ab:18:08:e1:61:2e:70:16:3f:a0:e8:4e:d9:
70:ff:6f:7d:f7:bf:fd:d2:e1:46:1f:3c:7e:a3:b5:
a3:c2:b4:07:e8:a1:db:e9:e1:08:ea:11:2d:05:da:
29:e8:2d:30:05:49:cf:18:83:53:13:ee:b9:a1:00:
7c:08:41:f1:87:56:5b:8f:d0:ed:1d:e1:70:83:ed:
27:3a:5f:4d:d9:2e:b6:f2:a4:cd:d7:4d:7c:4e:da:
1b:11:04:69:ef:15:61:35:6f:6b:24:08:84:0c:86:
ca:d9:59:fb:57:12:a5:e6:9b:a5:6c:a5:d5:53:10:
5a:ba:e6:1c:a9:68:95:f2:c8:32:8c:c8:5c:29:10:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:A4:47:BD:83:F8:2A:57:38:D8:B7:13:52:9E:5A:77:05:68:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:99:33:9d:d4:a3:80:9f:f8:bc:6a:e7:1c:92:b1:12:e9:f2:
66:89:24:5e:b5:b9:71:3d:c9:aa:cf:36:f5:e0:57:10:99:a5:
d0:7f:5f:90:27:a7:a7:1e:e5:62:08:25:7a:60:64:8d:32:93:
1a:bb:42:68:e4:4b:89:59:78:7c:3a:52:22:d6:44:ad:7d:56:
7d:01:1b:3d:55:a6:8c:20:0b:ac:e4:ca:68:a8:51:e3:76:38:
b6:f7:f6:c4:85:68:2c:89:c1:01:dc:ef:72:25:99:e7:26:f1:
c1:1c:32:a0:bf:d3:0d:2d:b4:2b:a1:14:86:db:fc:95:83:c5:
a0:ac:c0:d8:a3:1e:49:88:7d:94:92:58:41:2d:e6:89:bd:49:
9a:65:d5:e0:50:b9:18:b8:2a:e8:60:bf:a3:15:a0:dc:39:e0:
a9:be:ae:48:b7:69:cb:29:0b:c1:42:b1:95:68:13:1d:c5:df:
41:56:71:39:b5:d3:4e:72:55:3f:39:11:b5:1f:d0:0a:0a:c7:
1b:56:76:e1:8a:f9:2b:4b:21:42:f8:9b:9f:3d:25:7d:29:31:
cb:27:0c:ff:e8:da:06:01:ff:0e:b8:b2:46:6e:8f:a9:20:8f:
c8:04:50:04:19:83:e3:eb:4a:59:e7:de:7e:09:c3:23:46:f0:
50:df:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:08 2026 by rpki-client