
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
File: a542d1af-2531-3290-ba71-eda11a3f1e71.roa (raw, json)
Hash identifier: NsYBbPznGQH+hHioBgZCbWeJWWLtXFuyvX/C3xR+Yr8=
Subject key identifier: 42:2E:99:0E:77:4D:CB:69:E6:01:AB:D5:E0:79:56:AD:DB:5A:30:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D8EF991AFA58D974CDE36C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 396605
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f9:91:af:a5:8d:97:4c:de:36:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=28cb8cd6-efb4-4257-a9d8-6887834e827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:00:f2:5b:4b:ec:8c:58:3e:94:47:38:97:
a3:65:68:48:74:72:1d:76:f5:5b:a9:fd:aa:1b:58:
4c:07:b6:70:d1:0e:05:d3:62:e0:85:89:df:0f:06:
32:09:be:b9:6d:ae:69:58:f4:c2:c0:a2:5c:79:5b:
90:f4:e5:94:99:62:cd:82:0b:da:4f:8d:0f:cb:3f:
78:28:d5:11:0f:7a:6d:6a:9b:84:13:c0:d7:d6:ee:
58:14:c6:ae:cf:86:e3:bc:5f:fd:e4:0c:df:32:1e:
a4:20:14:0b:ae:92:69:da:39:40:c1:13:d9:c2:76:
ad:64:0e:a8:9a:fa:35:1d:ae:07:28:f1:a1:7c:aa:
fe:80:60:9a:ab:ef:1a:26:76:ea:2a:5c:be:40:7a:
fe:a4:f3:39:84:19:64:91:97:0c:38:de:aa:ba:aa:
00:0b:48:69:82:b4:48:82:15:dd:68:6d:23:07:98:
5e:13:4c:8f:d0:66:7a:c8:b8:e7:0b:77:57:ce:af:
de:14:d5:27:36:67:ae:06:95:6f:dc:df:99:8e:05:
5e:90:67:64:e3:21:dc:b8:b1:2d:61:b7:63:b1:04:
51:38:f5:d4:87:8c:7f:08:7e:86:d3:e5:64:45:a5:
ff:20:95:51:aa:8c:10:72:a1:d1:9d:21:66:79:5b:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:99:0E:77:4D:CB:69:E6:01:AB:D5:E0:79:56:AD:DB:5A:30:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d8:74:2d:10:cb:b8:a6:d3:88:b8:c5:ea:82:72:62:e7:1d:
3f:91:a1:05:53:a3:c5:bf:9a:e6:83:76:a9:1e:67:01:27:73:
e7:66:86:a6:a1:50:72:62:69:a4:f7:d8:af:4c:6c:9a:f1:3d:
e6:6c:a0:cb:19:76:a9:9d:20:b0:e5:12:18:9e:b1:45:e1:21:
d1:74:53:73:ae:25:ba:5a:90:dd:92:48:87:f4:65:8e:4d:5f:
13:30:b4:52:ab:d1:01:5c:ae:29:03:66:67:2a:3a:03:13:00:
b7:5d:ba:37:cc:7b:ec:90:66:7e:81:69:c8:9c:0b:e4:5e:25:
16:ed:a7:23:42:3a:84:a7:50:82:3a:25:33:4c:bb:01:7c:2e:
83:15:c8:cf:4a:32:87:cb:d9:ed:e5:5a:04:d6:ec:b2:5f:43:
0a:f2:12:0e:e2:83:8c:7a:f2:1d:49:db:c8:81:a7:af:95:bb:
e8:8c:b3:cc:75:11:c2:f4:26:e2:03:4d:f5:18:82:e4:0e:58:
ff:43:db:1b:1e:c9:1e:72:00:c6:9c:da:de:38:47:56:26:f8:
e7:87:76:b9:9c:21:9b:a9:f2:8e:d6:a9:0a:af:87:4d:62:2b:
30:3d:7b:10:dc:29:3b:a1:66:8a:35:3e:77:7f:0d:db:0a:4f:
55:cf:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:45 2026 by rpki-client