
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8db98fd-8fb6-361b-aece-b4b540bb1067.roa
File: a8db98fd-8fb6-361b-aece-b4b540bb1067.roa (raw, json)
Hash identifier: JPiKggATcs4yf88hfRCeOEjhZcxogF9f8U8glDvrcT4=
Subject key identifier: 78:83:CB:D9:17:4B:53:96:2E:8A:43:5A:FF:F8:B8:80:0A:AA:86:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D422F8F886ED932E25CC0CC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8db98fd-8fb6-361b-aece-b4b540bb1067.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 396575
IP address blocks: 2001:502:cbe4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:8f:88:6e:d9:32:e2:5c:c0:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=9dcb06e1-5f51-4596-afb7-ce3f8f0e4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:9e:4b:24:ed:7c:ed:0f:3c:8f:86:c6:29:
12:6c:df:0b:ab:44:fb:80:41:89:60:c0:b3:eb:90:
f0:96:54:ac:fd:55:ec:4f:ab:f0:90:8f:f9:f3:ff:
52:fe:60:22:04:de:76:b1:f5:bf:f6:d1:25:4d:f6:
d8:6a:6f:ff:53:d3:05:c2:2b:13:f7:83:44:6e:90:
10:5d:5c:18:7d:cf:c6:e4:51:4b:c5:e0:fc:f1:94:
83:05:1e:d7:04:09:f4:8f:15:bf:54:81:c3:1d:14:
30:d3:d0:1d:59:41:23:0f:f6:f0:a8:82:27:c7:9f:
a4:48:d7:83:d2:ce:78:10:09:59:72:f4:96:3c:f8:
6a:11:0a:3f:4b:27:fe:30:52:5f:42:74:53:13:04:
fa:a6:05:f2:d6:d0:7f:e7:ab:a6:92:2c:bf:11:06:
48:2a:c3:37:6a:76:d9:59:57:01:ba:65:c4:cb:56:
11:e1:ed:f3:27:b9:40:66:7a:45:68:c7:b4:4a:de:
0c:44:60:4f:f5:f4:7d:e4:a1:88:1f:7d:c5:1d:85:
c0:89:d1:6e:46:a9:79:02:1b:6e:4c:77:b4:c0:55:
66:90:e3:a5:83:86:a4:e8:0d:5a:e7:b8:87:99:7a:
76:3f:16:de:46:93:21:a1:70:de:3e:92:be:2f:43:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:CB:D9:17:4B:53:96:2E:8A:43:5A:FF:F8:B8:80:0A:AA:86:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8db98fd-8fb6-361b-aece-b4b540bb1067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:f3:d2:66:9d:2c:37:15:89:3b:c9:56:5c:92:a0:ab:41:26:
2a:75:73:96:4a:75:9f:88:ed:7e:fb:0f:2a:49:9f:73:a7:1c:
b5:1c:37:1d:02:32:0d:01:5a:a4:56:78:8c:ac:b8:b5:61:f9:
55:b1:f9:85:41:ee:d0:6f:3d:fb:69:17:74:0f:ab:e1:2b:57:
71:09:01:b6:59:59:f0:9b:8c:dd:31:71:95:22:49:42:78:66:
63:e2:a4:b1:23:66:f0:0f:c4:5d:55:d4:8c:51:e9:b1:a4:5f:
9f:7e:30:bb:1e:af:bc:d4:61:00:bf:34:5b:9e:fd:60:ff:05:
c4:50:f3:a2:b4:75:f3:ee:00:32:5a:aa:01:de:a3:21:5b:75:
b6:69:d2:a2:f6:c5:3a:0c:b5:77:59:7f:f1:ed:46:7b:66:2b:
71:b8:a3:48:59:fb:6e:7c:af:20:59:23:05:e2:03:ea:81:5b:
28:54:70:b3:f7:95:b2:fe:5d:e5:ff:45:91:d5:f6:1c:bb:62:
94:1d:ef:c2:d4:29:96:ba:d6:3e:fe:21:8f:26:d2:a3:50:f1:
c6:4b:54:73:eb:f5:50:3e:7f:13:6d:80:a6:ca:38:c2:2e:7a:
43:ce:4c:95:f9:f1:10:cc:b4:b0:19:bf:84:8d:96:c4:99:8d:
e8:50:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:47 2026 by rpki-client