
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa
File: b32225dc-4e70-3344-90cf-2210ac18eff5.roa (raw, json)
Hash identifier: QzQU5SPwenjEAkt2WwxWvTv6CW8GMknFcvvagoRJXyQ=
Subject key identifier: C1:10:A9:F5:ED:38:82:CE:34:96:98:68:92:7C:A6:1A:9F:50:13:81
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D250C388AD140CB8BF6989B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa
Signing time: Thu 12 Mar 2026 14:31:06 +0000
ROA not before: Thu 12 Mar 2026 14:31:06 +0000
ROA not after: Wed 10 Jun 2026 14:31:06 +0000
asID: 396594
IP address blocks: 2001:500:d937::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:25:0c:38:8a:d1:40:cb:8b:f6:98:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 14:31:06 2026 GMT
Not After : Jun 10 14:31:06 2026 GMT
Subject: CN=7f9bd838-03cc-4305-bfb4-8dbd1fa5afee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:58:31:b1:25:2a:8f:b4:a1:0c:03:71:67:
42:c9:c9:9d:c0:23:25:e0:e7:1e:8e:87:22:c9:c7:
91:e2:8c:46:0b:09:ab:ef:31:53:45:f4:a4:4a:51:
7c:4d:0a:6c:e4:9c:9a:44:03:af:12:8a:d6:2c:dc:
ac:ec:81:21:04:4a:ac:0a:dd:ac:9a:11:21:2d:99:
be:1f:81:32:a2:05:d8:b8:d1:b2:cf:af:fb:3e:e4:
d5:f0:90:39:1d:ba:4f:44:d7:e3:66:63:9f:19:fe:
66:1b:e5:4a:66:c5:23:af:1c:86:13:24:22:aa:e2:
81:0b:40:5b:a3:5f:7d:8d:e9:e8:75:3e:ec:09:11:
1c:22:f6:cb:b8:1a:6c:ba:54:f7:15:51:67:1d:3f:
6c:7d:78:82:66:47:0d:a7:b3:e1:57:a7:13:35:31:
bf:a2:82:6f:d3:29:b5:0e:d2:b6:5a:97:bb:2d:bf:
fb:46:81:81:f0:74:94:0a:c6:1b:4d:5a:48:7f:00:
5e:41:53:7a:2c:95:b9:27:fb:c6:b7:e4:47:43:b7:
8b:30:1b:38:11:ed:ea:09:bf:8c:9c:56:05:5f:67:
b5:63:d9:b9:5d:f3:6b:15:ba:05:ed:d4:c7:46:23:
77:98:73:3f:db:e9:f9:36:d5:c9:49:67:9d:72:5d:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:A9:F5:ED:38:82:CE:34:96:98:68:92:7C:A6:1A:9F:50:13:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32225dc-4e70-3344-90cf-2210ac18eff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:d937:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:94:ca:39:c0:42:0a:ca:30:4c:20:22:49:51:3b:7a:00:93:
1b:4c:9a:de:49:af:37:db:74:3d:a9:07:c2:60:ba:b9:b7:03:
a0:00:d5:b1:09:cd:8d:b0:04:17:1e:1c:84:27:9e:66:41:93:
31:b8:c7:bc:b8:14:8a:96:2b:7c:4b:4a:66:e1:26:71:0c:df:
c9:b9:ad:92:71:48:83:49:86:17:5f:1e:6b:f9:61:f7:1e:aa:
49:53:d1:82:f9:6d:41:17:72:c5:06:64:1c:07:78:11:ac:7b:
ee:ca:7d:e3:83:b3:a7:67:02:f4:03:e2:80:c2:12:d5:2b:b6:
ca:17:99:1d:ef:55:16:59:17:2b:23:4f:5d:2b:99:5f:97:ee:
1f:45:d5:75:d3:e4:c3:48:78:24:01:a5:41:10:bb:85:11:f3:
b1:54:6b:43:2b:f4:6e:20:b2:3b:13:fc:9e:cf:9c:52:77:d4:
34:85:bb:ea:73:17:82:88:59:c9:3c:9e:9f:6e:3c:7c:fb:80:
5c:08:b5:5f:27:69:73:4f:74:14:31:fe:60:89:35:62:a3:a6:
33:3d:81:d4:2e:aa:72:81:04:05:56:33:ef:1e:94:cc:06:fc:
66:0d:91:f4:42:e7:e4:56:ba:29:54:df:ec:64:90:f8:3a:fb:
76:42:4d:2b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDiK0UDLi/aYmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMjE0MzEwNloXDTI2MDYxMDE0MzEwNlowLzEtMCsGA1UEAxMk
N2Y5YmQ4MzgtMDNjYy00MzA1LWJmYjQtOGRiZDFmYTVhZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqtYMbElKo+0oQwDcWdCycmdwCMl4Ocejoci
yceR4oxGCwmr7zFTRfSkSlF8TQps5JyaRAOvEorWLNys7IEhBEqsCt2smhEhLZm+
H4EyogXYuNGyz6/7PuTV8JA5HbpPRNfjZmOfGf5mG+VKZsUjrxyGEyQiquKBC0Bb
o199jenodT7sCREcIvbLuBpsulT3FVFnHT9sfXiCZkcNp7PhV6cTNTG/ooJv0ym1
DtK2Wpe7Lb/7RoGB8HSUCsYbTVpIfwBeQVN6LJW5J/vGt+RHQ7eLMBs4Ee3qCb+M
nFYFX2e1Y9m5XfNrFboF7dTHRiN3mHM/2+n5NtXJSWedcl0o0wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMEQqfXtOILONJaYaJJ8phqfUBOBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjMyMjI1ZGMtNGU3MC0z
MzQ0LTkwY2YtMjIxMGFjMThlZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB3lMo5wEIKyjBMICJJUTt6AJMbTJreSa8323Q9
qQfCYLq5twOgANWxCc2NsAQXHhyEJ55mQZMxuMe8uBSKlit8S0pm4SZxDN/Jua2S
cUiDSYYXXx5r+WH3HqpJU9GC+W1BF3LFBmQcB3gRrHvuyn3jg7OnZwL0A+KAwhLV
K7bKF5kd71UWWRcrI09dK5lfl+4fRdV10+TDSHgkAaVBELuFEfOxVGtDK/RuILI7
E/yez5xSd9Q0hbvqcxeCiFnJPJ6fbjx8+4BcCLVfJ2lzT3QUMf5giTVio6YzPYHU
LqpygQQFVjPvHpTMBvxmDZH0QufkVropVN/sZJD4Ovt2Qk0r
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:50 2026 by rpki-client