
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfbb81f-3256-3f03-b54a-2417dc856df7.roa
File: acfbb81f-3256-3f03-b54a-2417dc856df7.roa (raw, json)
Hash identifier: NkaYiKfw10BJmW5KHmWqXViEIul5cdnxq2CTnPqE5nM=
Subject key identifier: 8A:86:87:48:85:33:42:F7:F3:59:37:64:46:31:77:B2:DC:F0:E9:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFF89B6A1CC0FBD63F33960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfbb81f-3256-3f03-b54a-2417dc856df7.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 397209
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:89:b6:a1:cc:0f:bd:63:f3:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=fc8e2bea-7440-4c6a-aaad-820beb47ebd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:a6:a9:fd:a1:e4:bb:c8:e3:45:d3:9c:4a:
1f:75:32:f3:80:5b:d1:05:9f:e6:d3:cc:a5:51:9a:
74:29:d1:4c:00:50:a8:1c:80:47:5e:da:f0:f8:c6:
5e:d5:3f:75:e0:2f:94:0f:05:09:9e:3a:4b:c6:83:
49:78:59:bf:9e:d4:fc:d2:a8:94:17:a1:e9:d8:4d:
a3:67:f3:e5:3c:a8:2c:c4:09:a3:16:08:e3:9b:d8:
70:76:99:2c:41:9a:54:6b:c0:b2:2f:df:e5:2d:50:
a7:ad:a3:b8:b1:8a:64:31:97:e9:50:93:51:12:4a:
16:70:10:b8:54:da:b9:53:f2:70:a0:e7:0b:dd:48:
a4:26:aa:59:49:9b:47:4f:81:b3:7c:37:91:57:e0:
ca:d5:b1:d5:28:4e:1a:c2:8f:8e:ab:18:3a:a0:21:
51:ed:6f:1b:4c:3c:26:53:fc:9e:eb:82:ad:28:a3:
50:18:8f:96:c1:b7:c1:d4:9e:db:62:cf:3f:ad:2a:
d9:af:e1:b2:b5:9e:3c:7b:f0:49:25:db:fb:4f:a2:
5f:c1:1a:fd:84:9d:9c:1e:ae:60:53:f4:ef:e3:8c:
5f:52:4c:be:fc:f5:0b:d0:6a:0b:8f:68:55:e2:0e:
bd:e8:c2:c7:00:fb:5f:67:5c:ca:5f:4f:af:36:ec:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:87:48:85:33:42:F7:F3:59:37:64:46:31:77:B2:DC:F0:E9:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfbb81f-3256-3f03-b54a-2417dc856df7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:37:c7:09:3a:a1:d4:cc:ce:a2:74:ce:01:3d:fa:ab:45:d4:
5a:5e:20:cc:36:45:4c:cf:18:c6:10:fa:7f:c3:b4:e3:3f:78:
8a:19:c3:df:d1:e7:87:81:1c:f1:fc:36:34:13:c9:60:a2:79:
04:ee:0f:fe:55:39:2d:08:a3:e4:d7:a4:57:ee:e3:2b:0b:60:
75:d1:df:ca:19:f1:2d:b6:54:d2:b1:30:da:43:6b:fb:f2:16:
67:c0:c3:97:d6:f9:c9:a7:70:d6:d2:e3:9a:8a:63:12:b9:7d:
b2:bb:da:05:da:84:6d:7f:25:c4:2a:de:9b:4d:d9:81:b6:ae:
72:5f:b7:66:41:8c:07:ab:ff:f7:ab:88:c7:de:4c:67:b7:31:
7b:32:a0:f8:84:fa:b3:cc:e0:b2:96:39:2d:b8:8c:e1:eb:e8:
41:64:2c:a6:82:1e:46:aa:43:48:21:54:7d:1e:b5:0f:fb:e7:
ef:49:c6:62:9e:fa:c9:0b:c9:e2:2f:08:1c:02:bf:82:af:3a:
b4:f1:9c:62:37:c2:f2:87:b5:6d:5f:34:57:82:ae:57:1b:8a:
a9:63:5c:3f:81:52:f7:21:84:d7:60:a6:8c:7e:7e:5c:f8:75:
b7:d9:11:0e:20:a4:8b:d8:9e:2a:bb:e6:be:f2:54:0e:0b:e4:
67:6c:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:16 2026 by rpki-client