
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa
File: 87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa (raw, json)
Hash identifier: k8pSV9Ts7wB3JJAfvrrh8MvmX1fEBBbSRAZzIqWwGg8=
Subject key identifier: 38:5B:D7:1E:1D:95:44:CF:37:32:BF:DA:F7:07:C6:7D:09:DB:16:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D19B4EED8593309B984C41700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 397202
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:ee:d8:59:33:09:b9:84:c4:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=73b1af62-ebb2-4d6d-a349-bda35527ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:3c:97:3d:1b:ba:0c:89:ed:cf:36:e8:bb:
b5:6e:15:96:32:e6:25:76:69:3a:ae:da:a1:69:3c:
80:2a:05:fa:f4:a2:24:a5:24:fc:ca:2d:99:5c:43:
ca:ce:d7:0c:5a:26:77:12:ab:a6:82:15:19:e4:cd:
f0:bc:81:f7:9d:b6:20:17:8a:7f:d0:91:95:ef:c8:
04:f3:13:ad:e0:22:ee:92:15:88:bd:bb:c2:cc:a5:
46:ce:e6:97:83:06:2c:07:36:26:77:ce:fe:d9:29:
80:01:5f:ce:32:d3:2e:0f:c6:84:69:6f:ef:36:3e:
99:9c:c7:0a:a1:b2:0f:f3:90:90:cc:2d:84:31:12:
fe:2d:08:11:b1:25:2d:ce:fd:c8:e3:1f:f9:5d:bb:
33:9b:17:28:cb:c1:20:2a:f3:d8:40:58:4b:cc:9a:
a8:02:b1:00:88:f9:dd:06:b2:1c:5c:69:3f:08:46:
44:ae:c9:2e:fc:2c:7a:72:94:4e:56:60:ee:bf:e8:
ea:7f:40:68:0c:e8:8e:e7:14:08:42:b7:1d:7a:8e:
de:20:23:53:ef:52:05:1a:c5:b7:5a:d9:85:40:65:
54:8c:c4:03:f4:c2:d8:b1:d6:5a:f1:ea:1f:2a:b0:
b0:10:03:70:10:73:06:b9:a4:9c:83:ef:d0:7f:37:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:D7:1E:1D:95:44:CF:37:32:BF:DA:F7:07:C6:7D:09:DB:16:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:29:bf:86:76:44:ca:5a:6e:85:ba:17:bf:46:a3:fd:71:6a:
2c:3a:46:43:08:88:26:dc:fe:e6:0b:89:4f:03:dd:b9:6d:12:
bc:32:41:b0:15:99:26:04:6b:38:52:71:08:61:a3:b9:9a:35:
e0:7e:a7:3f:15:73:85:be:60:9a:c1:77:6c:0a:a5:5a:ff:20:
3d:34:40:01:0b:ed:85:f2:2a:f0:f3:40:3c:70:d7:0a:17:18:
22:8d:b8:87:c6:c1:87:40:2d:28:6b:b5:8a:c8:2a:2d:aa:a1:
79:16:61:c5:bf:71:7c:ec:b7:9c:c0:c5:f5:58:44:ac:00:89:
95:9a:57:09:48:bf:99:b4:b2:a3:97:49:12:fd:18:40:2a:bb:
fa:86:b6:bb:39:5f:e7:56:08:18:54:fc:b0:ef:d5:e8:8d:7a:
20:97:f1:73:4b:b1:7a:da:77:43:ff:4f:66:c3:c5:1a:bd:1e:
2b:40:a1:07:56:fb:f5:d9:16:6f:9f:38:59:a6:fa:14:0f:f6:
ee:ad:51:78:09:32:7e:3e:2f:3b:4c:d4:ae:93:e9:76:e1:75:
da:9e:09:d1:eb:56:d2:d0:69:47:bd:2f:64:04:15:c5:e5:ba:
4e:ef:d5:b3:c6:d3:7d:c6:66:81:8c:cd:8f:df:8c:66:94:dc:
54:db:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:15 2026 by rpki-client