
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ceb65-5d9a-3942-bb2c-50c017b47a3b.roa
File: 956ceb65-5d9a-3942-bb2c-50c017b47a3b.roa (raw, json)
Hash identifier: TN1uQcwOhhkFVkOg6vjZgL6JeyXxDweC395EPXETkCs=
Subject key identifier: EF:56:00:D6:F9:33:CE:65:11:8E:C1:41:78:12:45:44:50:09:23:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9A202B27606B7CBC1EE4B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ceb65-5d9a-3942-bb2c-50c017b47a3b.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 397212
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:2b:27:60:6b:7c:bc:1e:e4:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=3bb552b6-98f3-462b-9ace-60519f2d1624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:2f:e5:59:ff:d2:47:c5:b6:1c:e7:15:64:
ec:bd:dd:90:3c:60:bc:95:ca:d2:5a:55:cf:80:5e:
09:bc:0b:9a:ec:b4:2d:9e:86:2e:1e:42:cd:a7:ad:
fc:f8:f6:c5:18:b5:6d:82:2d:d2:db:de:06:c8:3f:
85:15:a9:ed:c7:72:80:f9:65:71:97:e4:f1:57:08:
51:1b:76:39:31:e9:64:d2:eb:d6:ad:f5:00:f1:df:
80:16:4e:97:6b:1e:64:f8:31:78:90:33:c0:74:82:
25:b0:25:28:5a:9a:53:2d:b1:63:8c:b6:c8:fe:33:
6e:73:3b:56:cf:cb:31:4d:18:49:98:a2:e3:a4:cc:
72:3a:d5:43:4d:51:e8:8e:86:38:cc:8f:c9:5f:98:
f9:8f:e0:9d:af:fe:33:da:5a:e2:01:cd:41:76:53:
86:63:8d:c3:1b:b4:ef:77:b8:66:c0:69:73:06:77:
fb:ba:f8:36:c7:2a:d4:d3:c4:45:80:8f:2a:e8:dd:
68:17:83:20:16:4a:90:f1:2d:00:aa:8f:0c:7f:f0:
e5:6b:b9:12:ac:ab:f7:13:41:f9:ec:a8:7c:1c:20:
8d:19:4f:85:8b:70:d0:28:aa:fe:f0:78:d9:00:dd:
31:ba:f0:83:ec:25:7a:d2:4c:34:c4:ed:26:dc:09:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:00:D6:F9:33:CE:65:11:8E:C1:41:78:12:45:44:50:09:23:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ceb65-5d9a-3942-bb2c-50c017b47a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a5:ac:60:f9:ed:0e:76:f0:4f:46:b1:47:0d:30:52:28:1c:
bc:c7:4d:85:4a:58:22:de:c4:0f:81:24:4f:39:44:86:d0:b5:
3a:23:4d:2e:50:7f:a8:a3:d7:70:55:a8:4b:cb:ff:b3:a7:47:
de:b7:13:5f:1a:96:a6:97:59:cc:93:8d:35:20:aa:4d:b9:6d:
d1:2e:47:5b:f2:5b:c7:02:8c:81:d4:d9:8a:e6:c1:66:0f:d8:
37:22:ff:cc:d2:8b:53:6d:ab:4d:50:5d:ff:41:cf:28:0b:9f:
9f:9f:32:96:c7:b5:e9:f8:6c:4c:75:2e:5a:f0:fc:2e:ee:08:
15:ba:6c:9c:f0:be:7f:a7:50:62:39:b2:81:70:73:77:de:6b:
a2:ab:3d:23:c8:56:57:b2:67:7a:36:dd:04:58:a7:4a:34:7a:
dd:4a:a0:dd:fd:25:28:4c:7b:cd:0b:3b:e3:dd:d8:03:c5:de:
86:92:72:f2:4e:e3:d2:e5:5b:9b:8f:dd:5a:25:7d:b5:06:0b:
82:1f:80:a0:1f:ab:9d:bd:d5:12:3d:3a:4c:fd:0f:9c:be:d0:
84:50:21:d0:9a:a7:66:e7:8b:ae:ad:13:a0:d3:87:2a:08:76:
d5:1f:1b:8c:1f:1c:ae:9b:52:44:67:c4:f5:de:90:54:01:bf:
7f:cc:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:59 2026 by rpki-client