
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
File: a29c63fa-621f-3158-9a75-f40261331223.roa (raw, json)
Hash identifier: jkTYVr7+zyNcdBlhRO/yqCP7R05+B1yF3vZwntImaRo=
Subject key identifier: 3E:7C:27:76:7A:FB:FC:C8:C7:12:EB:94:64:BA:49:28:E9:77:60:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9B854DAF0586291A64115000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
Signing time: Fri 24 Apr 2026 01:00:23 +0000
ROA not before: Fri 24 Apr 2026 01:00:23 +0000
ROA not after: Thu 23 Jul 2026 01:00:23 +0000
asID: 36629
IP address blocks: 2001:502:7094::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9b:85:4d:af:05:86:29:1a:64:11:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 24 01:00:23 2026 GMT
Not After : Jul 23 01:00:23 2026 GMT
Subject: CN=eb3aa9d4-4c38-4c09-8f71-24f56a46a7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:73:dc:41:89:73:9e:fb:c5:f8:fa:9f:1a:
5c:4c:77:1a:7b:9b:db:bc:42:18:9e:38:cd:3e:59:
60:e5:1a:b4:2d:4c:e6:15:41:e2:8b:3e:77:08:fe:
70:0d:b9:74:7f:c1:1a:e1:14:84:9f:24:9b:7b:1b:
80:48:82:2f:43:bc:57:e3:6d:01:bf:b5:bb:d9:c2:
63:7b:00:71:cd:f1:eb:4b:86:5c:f9:05:d0:48:46:
d5:6a:82:79:51:27:15:25:f4:a0:96:e0:6a:0e:fc:
d2:0d:92:f9:0d:a9:ec:ca:3e:5b:aa:cb:e7:8b:63:
dd:46:77:53:88:d4:9f:4b:ba:7b:ab:55:52:c5:42:
f1:fe:c7:9f:99:43:29:81:76:a4:d3:63:1b:bc:4f:
31:33:c1:09:6c:fb:cb:35:0b:f4:01:36:fb:09:c5:
ab:d5:fb:34:6c:2f:05:8c:bf:9b:8a:15:70:5f:1f:
2c:c8:1b:4d:ae:69:9d:be:22:59:32:56:a1:99:c8:
4a:6e:42:73:41:ea:1a:f9:a8:13:25:a5:b3:62:c5:
cd:04:cb:a9:cc:66:8f:a6:c8:f6:54:f6:06:43:97:
9d:65:32:f8:e1:23:0d:ab:de:d0:b3:f1:d8:f1:fe:
10:2e:bc:4f:c3:2e:52:82:db:33:19:38:a7:90:4a:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:27:76:7A:FB:FC:C8:C7:12:EB:94:64:BA:49:28:E9:77:60:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29c63fa-621f-3158-9a75-f40261331223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:7094::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:22:77:ff:83:a4:9e:54:42:c1:5f:c8:b1:d9:4c:01:7d:5d:
8e:51:d1:a2:46:7f:c8:7d:1d:4a:35:fa:82:6c:c3:83:a9:79:
76:3e:5b:a5:57:bb:27:d7:c0:c4:ad:8b:14:c6:fb:dc:4f:16:
c3:95:12:cd:db:75:e3:3e:4d:54:74:5e:85:3e:f8:ec:5a:41:
a9:61:48:5e:e4:bb:b0:36:db:84:57:99:de:ea:95:c1:c8:5a:
8a:1b:22:26:dd:14:ce:a1:fa:e5:2d:13:f7:1b:7e:b2:34:2c:
8c:9b:40:e4:69:f5:41:a0:70:81:11:50:cc:a3:3a:9a:ab:c4:
a2:5c:72:70:8b:8f:73:e9:1b:12:e1:60:38:39:85:86:55:9b:
af:08:93:0d:81:01:67:4f:91:e1:73:6f:a1:04:6b:bb:67:53:
c5:b2:4d:57:69:a6:79:c2:d7:14:9f:15:df:f5:87:9d:ef:a9:
cd:cf:d7:30:0b:e1:3b:34:6f:75:c7:a9:33:31:51:54:3f:ee:
ce:06:4b:34:a0:71:e9:80:14:74:62:9f:11:fc:3c:a1:c0:dc:
92:41:0a:c2:ad:12:f7:81:f2:ad:c4:ef:5f:00:ae:67:be:d6:
71:fd:62:89:27:be:e1:cc:43:fe:2a:75:e6:60:f6:82:43:7b:
de:40:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:17 2026 by rpki-client