
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/867ca94c-c3af-344a-a9fe-51f5ab27c397.roa
File: 867ca94c-c3af-344a-a9fe-51f5ab27c397.roa (raw, json)
Hash identifier: FlSd60oyrsVv3Ec5wyXYKrO4K+Y8uLDUVWH6eWvrk/k=
Subject key identifier: F8:C7:2F:70:E9:35:F8:52:1F:A1:86:EF:CE:69:5B:CF:3B:3B:5D:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9A202D91E6E8E779D8E5C300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/867ca94c-c3af-344a-a9fe-51f5ab27c397.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 40647
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:2d:91:e6:e8:e7:79:d8:e5:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=5d82acd4-8c7f-47d5-9382-8d563acfedda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:7d:64:8c:38:5e:45:23:9f:19:c1:32:6c:
65:27:df:b7:f9:5d:d8:3f:1f:7f:e2:4c:4a:5a:93:
a7:f5:ee:04:0e:a8:78:bb:38:d5:d9:2b:f7:46:52:
d2:c5:3f:71:52:78:e0:0d:ae:32:9e:4c:4b:8c:99:
d8:04:b2:d4:df:8f:a7:a7:1a:38:20:e1:16:ed:68:
5c:b7:83:28:52:89:3d:79:c9:98:b3:57:1a:63:ad:
45:45:18:1a:dc:d5:12:42:f2:64:7f:15:ea:38:ea:
9e:a1:8e:0b:0e:86:7d:62:1a:0e:11:0d:ae:82:4e:
18:7e:0d:3b:cd:dd:1d:8c:52:7a:56:01:57:da:37:
0d:60:a6:d8:3b:0b:91:fd:ad:71:8e:00:59:d2:27:
a2:79:71:87:d4:b5:b7:c1:bf:61:81:fd:69:1e:97:
43:e4:11:b3:81:02:64:8e:01:cc:58:3a:19:c8:2f:
1f:2d:62:13:d1:d8:b4:f9:d9:8e:63:af:4b:57:2a:
3b:5f:cc:92:3c:78:b8:6e:ce:b1:f8:a6:42:29:88:
c0:53:d1:48:57:b7:8b:e6:5e:57:99:72:e5:8c:b6:
f2:dc:88:99:83:23:21:d4:18:61:a9:24:f6:63:57:
7b:d4:8a:cd:89:78:3e:6c:05:14:28:70:fa:03:b6:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:2F:70:E9:35:F8:52:1F:A1:86:EF:CE:69:5B:CF:3B:3B:5D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/867ca94c-c3af-344a-a9fe-51f5ab27c397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:51:6b:0d:d2:7b:83:ea:91:cc:6c:ce:28:8d:15:2a:a6:5f:
32:17:84:04:4a:50:d6:ae:42:73:b9:0d:e3:27:c8:1c:2b:7d:
94:b4:33:de:c1:66:3c:bf:18:06:f4:a2:b0:d5:99:8f:0b:82:
85:23:1d:1a:0e:75:88:32:95:86:d1:bc:6a:40:c6:65:d0:0d:
dd:88:38:b7:0d:2f:d3:20:fe:d4:74:e0:22:e5:46:94:cd:86:
e9:7e:c5:95:06:92:87:24:ed:99:9d:94:cf:f9:55:e6:1b:b7:
1a:34:5e:5e:f9:6d:19:60:be:a0:6d:a7:94:29:26:ec:7d:2c:
30:96:4d:c7:41:5a:e3:36:66:4e:db:53:1b:6c:e0:dc:57:dd:
a3:8e:e5:e7:78:97:a1:8e:68:49:15:2b:5e:65:a9:04:de:a1:
04:bb:8b:a5:31:08:21:e2:31:c3:21:a3:57:e1:f6:91:c1:53:
cc:46:91:e1:b1:29:e3:35:7b:0a:21:31:3d:8e:73:89:42:47:
c8:e1:62:c1:73:fa:54:1c:1f:f3:78:0f:d6:34:77:28:c4:4f:
e9:e2:03:fa:86:a1:05:24:e4:0f:0a:e8:5b:39:8b:32:c4:da:
32:49:2e:69:f4:92:ec:f2:96:cc:96:bb:3e:f1:06:be:b7:72:
5d:8d:24:62
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2aIC2R5ujnedjlwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NWQ4MmFjZDQtOGM3Zi00N2Q1LTkzODItOGQ1NjNhY2ZlZGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtel9ZIw4XkUjnxnBMmxlJ9+3+V3YPx9/4kxK
WpOn9e4EDqh4uzjV2Sv3RlLSxT9xUnjgDa4ynkxLjJnYBLLU34+npxo4IOEW7Whc
t4MoUok9ecmYs1caY61FRRga3NUSQvJkfxXqOOqeoY4LDoZ9YhoOEQ2ugk4Yfg07
zd0djFJ6VgFX2jcNYKbYOwuR/a1xjgBZ0ieieXGH1LW3wb9hgf1pHpdD5BGzgQJk
jgHMWDoZyC8fLWIT0di0+dmOY69LVyo7X8ySPHi4bs6x+KZCKYjAU9FIV7eL5l5X
mXLljLby3IiZgyMh1BhhqST2Y1d71IrNiXg+bAUUKHD6A7afXwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPjHL3DpNfhSH6GG785pW887O13LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY3Y2E5NGMtYzNhZi0z
NDRhLWE5ZmUtNTFmNWFiMjdjMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApUWsN0nuD6pHMbM4ojRUqpl8yF4QESlDWrkJz
uQ3jJ8gcK32UtDPewWY8vxgG9KKw1ZmPC4KFIx0aDnWIMpWG0bxqQMZl0A3diDi3
DS/TIP7UdOAi5UaUzYbpfsWVBpKHJO2ZnZTP+VXmG7caNF5e+W0ZYL6gbaeUKSbs
fSwwlk3HQVrjNmZO21MbbODcV92jjuXneJehjmhJFSteZakE3qEEu4ulMQgh4jHD
IaNX4faRwVPMRpHhsSnjNXsKITE9jnOJQkfI4WLBc/pUHB/zeA/WNHcoxE/p4gP6
hqEFJOQPCuhbOYsyxNoySS5p9JLs8pbMlrs+8Qa+t3JdjSRi
-----END CERTIFICATE-----
Generated at Wed May 13 11:28:39 2026 by rpki-client