
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
File: 9f9e87a5-daf1-38e1-9600-8596d3062364.roa (raw, json)
Hash identifier: nSeTyyZu2KvzFvegAPF3aL73LryRVIHD77AVu2NSk3I=
Subject key identifier: 6C:B1:8B:70:3B:CE:05:6C:07:56:67:74:60:5F:20:54:AE:E8:BC:3D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F4A6A5270170216C66B8800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396597
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:6a:52:70:17:02:16:c6:6b:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=9baeb25e-12a6-40f9-b287-7e92fe9b2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:54:34:65:d2:22:1b:32:5e:7a:9e:ed:cd:
6d:af:e0:18:89:94:4d:8d:17:91:c9:42:f7:4a:b0:
16:78:e7:bd:9e:0e:0d:a7:08:5c:54:38:15:52:31:
12:db:a7:39:d6:a2:50:38:31:2a:05:35:ca:5d:56:
ba:4c:e0:5f:27:5b:38:9a:b7:6c:c5:9b:0c:a4:dd:
02:01:e1:b6:e2:9c:2c:39:59:63:ea:80:89:6f:38:
f4:73:0a:59:29:b5:0c:78:a1:80:a1:83:ee:78:46:
7f:89:50:3f:b7:5a:01:13:07:0a:02:5c:a9:fe:f9:
47:76:64:9f:7d:84:7e:b9:f2:61:7e:66:b1:40:50:
3d:2f:f3:fe:5d:32:c1:71:3b:80:61:a0:85:51:23:
d7:6f:6d:66:5e:2d:81:97:11:2c:92:a7:94:0a:b0:
79:15:a6:48:06:ef:cb:b9:21:88:dc:64:a8:22:65:
67:73:ab:dc:a0:01:48:bc:b3:70:51:8d:11:6c:b9:
65:af:f2:66:af:8c:ae:6b:fe:8d:9e:a5:97:7f:0e:
e1:ee:cf:5e:c4:a8:64:1d:e5:d4:f6:21:0e:f8:de:
11:bc:f1:09:bf:c0:d4:c3:80:41:0d:d1:c4:21:3e:
76:10:f4:9a:63:6b:51:39:ee:97:79:47:cd:01:5d:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:8B:70:3B:CE:05:6C:07:56:67:74:60:5F:20:54:AE:E8:BC:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:53:3f:25:1f:10:d7:54:79:2d:94:b5:58:66:9f:0c:fd:1c:
f1:9e:26:17:f5:ec:a0:96:60:28:ec:57:c2:28:73:0b:2a:de:
f3:01:1c:ed:90:dd:9a:6f:a6:70:5c:f2:dd:39:62:c5:b9:b7:
22:45:73:8b:d3:26:d8:c2:28:16:55:bc:7d:0e:cb:42:e4:24:
19:0c:36:0d:e5:d7:99:98:c6:34:77:b7:6b:94:bb:8c:09:0e:
73:af:07:59:fc:ca:58:4c:22:fa:3f:ea:77:58:07:d0:56:10:
ea:af:ca:9c:a6:31:16:ec:19:56:90:b0:1f:8c:d1:89:92:e4:
20:f7:40:58:ce:0b:0c:26:5d:f7:f0:01:aa:9a:4a:e5:6c:25:
9a:03:1e:0e:8c:c8:3f:ee:c2:ac:9b:83:e0:e0:58:af:f1:38:
53:98:3a:bb:6c:e9:a0:1e:90:cc:fb:a2:86:d7:ed:96:af:38:
7c:b6:2a:a8:eb:9e:f1:79:8a:73:9b:02:2e:52:eb:89:d3:e9:
5b:a5:8e:0b:ff:69:24:91:a8:10:2c:c7:31:31:b5:19:3f:c1:
92:2d:92:71:14:21:3f:4f:e9:2c:21:95:c1:cf:94:35:f6:11:
92:51:04:e1:1b:17:f3:d3:aa:18:ac:2b:14:8f:2b:f7:e0:d2:
3f:23:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:04 2026 by rpki-client