
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e96fce-873d-33b6-ae0c-240af6a0624f.roa
File: a6e96fce-873d-33b6-ae0c-240af6a0624f.roa (raw, json)
Hash identifier: dE1vDru4h4G9lew4YVv5Y5p/a7g1JevnkMrv7ysTXR0=
Subject key identifier: BC:04:45:42:D9:B1:D1:BE:8E:1B:70:5D:97:0C:BF:47:96:94:4F:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D250C34A6FE56E61B3AB41C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e96fce-873d-33b6-ae0c-240af6a0624f.roa
Signing time: Thu 12 Mar 2026 14:31:05 +0000
ROA not before: Thu 12 Mar 2026 14:31:05 +0000
ROA not after: Wed 10 Jun 2026 14:31:05 +0000
asID: 397210
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:25:0c:34:a6:fe:56:e6:1b:3a:b4:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 14:31:05 2026 GMT
Not After : Jun 10 14:31:05 2026 GMT
Subject: CN=0d0de84b-1406-4c35-8771-fa315835ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:56:f6:d2:a9:31:0c:ff:09:d1:8a:47:0d:
fe:22:95:39:0b:ba:5e:69:b0:6e:96:58:e3:d1:e1:
89:59:36:36:d2:65:ab:47:33:a6:6e:24:72:98:bc:
65:61:0f:ee:4c:f6:c3:68:c8:7f:28:3d:b2:fc:e8:
c8:c8:30:e4:69:0a:f1:95:88:d0:09:d7:89:02:db:
78:24:fc:1a:d0:e3:44:89:96:b3:19:6f:53:50:57:
9f:ad:c8:9e:01:c8:e0:b0:28:76:54:97:a4:95:7b:
57:2b:0f:13:c2:e0:49:80:08:f9:41:f2:c3:47:25:
4a:6e:7b:a3:97:f9:82:9d:38:96:0f:0d:1b:a1:50:
bd:41:54:bc:a6:6b:58:d7:af:6b:7e:81:cf:fa:ac:
e6:7b:8f:50:2e:55:83:c0:6f:94:80:28:25:35:d9:
8e:cb:58:42:41:19:40:8a:60:ec:2b:9f:7c:9e:45:
9d:de:55:4e:47:0f:1b:c6:30:b5:ae:99:1e:c1:00:
e9:c7:19:16:19:b5:1a:b2:ce:8f:a6:7c:c0:a9:28:
fb:e9:56:d9:a2:19:d6:b4:87:99:95:c2:5a:51:df:
1d:75:d8:39:8f:05:bf:be:0c:c5:47:db:27:d3:fd:
f8:f6:19:85:c3:69:b5:a2:2a:b7:7e:c1:34:38:37:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:45:42:D9:B1:D1:BE:8E:1B:70:5D:97:0C:BF:47:96:94:4F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e96fce-873d-33b6-ae0c-240af6a0624f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c2:03:f8:a0:c9:6b:3b:7d:25:d2:60:0e:43:c9:20:da:4f:
37:09:6d:1d:0e:04:40:66:39:9f:39:2a:c2:cf:cc:79:9b:6a:
9d:bf:07:24:79:37:5f:2f:fb:21:80:9c:89:28:bf:24:35:42:
29:d5:cb:52:9c:f2:9a:dc:bb:23:c1:c1:50:dd:39:d8:13:16:
dd:f2:7d:ba:f7:a5:be:2c:3b:aa:29:06:2a:4c:de:6d:e6:e6:
64:2f:2a:fe:5c:0a:3f:a4:ee:a5:1a:e8:78:32:07:f5:f9:4a:
8a:5c:fa:db:0a:40:d7:98:d8:11:e0:c4:91:97:4f:23:37:40:
f2:16:6b:52:c7:32:3f:83:9e:3a:29:9c:92:92:9a:13:44:07:
2c:9f:fb:43:ca:19:49:f3:8f:26:7d:0b:63:57:07:a3:fc:90:
55:72:78:38:5b:61:1b:7f:e8:f1:e5:b9:e4:5b:f3:1f:6c:98:
bd:4b:81:38:11:99:2a:a6:f4:47:4d:d8:5b:8d:2d:ff:44:fe:
d8:af:88:c9:fe:5c:cd:b9:e6:c6:53:4d:63:03:f0:f8:c3:59:
11:0f:c4:b4:e3:84:89:d0:de:cb:c2:50:f7:d9:e6:61:9b:7e:
73:ef:8c:ac:8d:41:a0:8e:4f:d6:77:a4:a3:1e:9b:1e:49:e3:
5b:8d:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:34 2026 by rpki-client