
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa
File: a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa (raw, json)
Hash identifier: R/ubPdXT7zGmYv2XzqP0QRRn265s44GUregKphvmTNY=
Subject key identifier: 30:86:55:35:BE:1B:13:82:B6:AD:39:0D:0E:C9:12:04:1B:0E:66:19
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9A202BC85CF56EDBDF5BDDE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 396599
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:2b:c8:5c:f5:6e:db:df:5b:dd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=1160c8d0-ce7f-4fa1-93c2-7726ffbb3a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:c2:21:b0:72:db:e0:dd:ef:ce:15:2e:a0:
46:26:02:c0:7b:06:e8:34:89:6f:fc:21:cd:fe:87:
36:7d:78:35:5b:93:d6:f7:9a:96:02:c3:c8:16:74:
af:7d:21:96:cb:08:a5:15:88:53:63:ba:ac:ce:6d:
21:9e:d6:b8:aa:82:6e:57:f3:84:33:ed:d4:d7:76:
4d:96:e7:fc:07:60:60:4b:86:f7:ee:a0:e1:d4:56:
c4:2f:0d:49:3d:8c:46:9b:88:b7:12:ed:d4:09:73:
41:58:07:f0:3f:ed:b4:c9:11:90:62:03:e7:8e:03:
3e:16:9a:6a:fb:22:12:b4:2b:0b:f2:ff:ce:e5:7e:
09:b5:14:d1:0d:13:87:a2:64:6f:eb:31:55:25:39:
97:ca:a6:f4:7d:e2:54:ad:3e:73:33:c4:5f:ac:f7:
5d:14:fa:ff:4d:86:f0:0b:a1:84:8f:f3:68:c4:dc:
68:70:6d:85:f5:ab:d2:47:c0:f6:71:ec:f9:9b:86:
ce:69:2e:57:60:b1:12:d7:71:26:c9:64:dc:c3:6b:
83:79:58:4f:68:2f:26:ab:94:66:c6:42:25:6a:8d:
63:64:33:d9:05:8f:d9:60:72:0d:59:e0:f3:58:19:
f5:41:be:36:e4:51:78:66:19:4d:73:0c:64:20:9c:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:86:55:35:BE:1B:13:82:B6:AD:39:0D:0E:C9:12:04:1B:0E:66:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:fa:3a:91:a9:81:90:85:af:46:6e:06:0a:d1:85:46:a2:c5:
4d:a3:13:19:74:58:06:a3:57:ac:a8:bf:8e:6f:6a:27:2e:00:
87:df:62:da:67:2a:ee:9d:5f:e4:9d:34:e4:bd:81:48:de:75:
a7:ef:68:72:45:7a:fa:56:f4:f0:3a:88:9c:66:a5:c6:ee:67:
51:08:74:41:60:2e:05:b8:a4:76:0f:53:25:08:38:0a:72:61:
f2:b4:5e:e1:bc:cd:b5:7b:31:28:68:a2:61:50:11:f8:a7:aa:
2f:d1:c5:55:6a:a3:6f:23:8d:42:4d:29:e1:65:fe:b1:81:41:
d5:bb:c0:e4:b0:71:3d:f6:1a:ee:db:fe:5a:12:4e:2a:0b:7b:
18:88:c8:4c:47:2f:46:0a:aa:21:12:a2:da:59:46:96:26:b9:
2f:fc:5b:a5:19:b9:f9:8c:a3:e0:71:c8:77:35:66:c7:fc:36:
46:14:98:b8:b5:8c:e1:d0:81:23:d7:7f:08:34:bc:23:7e:92:
17:30:51:1e:01:31:31:aa:b6:39:ee:88:21:4b:fd:52:be:b4:
83:98:06:45:8f:63:66:ae:63:fc:3c:e9:a0:88:8c:d2:5a:ed:
09:d8:77:07:f7:48:d7:f0:5a:26:19:76:8f:c7:e6:77:0c:47:
18:e4:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:52 2026 by rpki-client