
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa
File: cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa (raw, json)
Hash identifier: Yuy2vujhP8rZL2pgCmQ8MoBBQeMwcp6PgppqzWm8Dy4=
Subject key identifier: F4:E0:9D:3D:DF:72:1C:B1:A5:2D:73:DC:22:3F:32:C0:EB:CF:4B:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DAAE02158AA2EDF047CC87E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 20362
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:21:58:aa:2e:df:04:7c:c8:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=256deffc-de22-4933-8ea7-3086e0c01771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:63:9c:ff:e9:dc:c6:de:87:38:dd:3b:65:
4a:1f:ae:15:1f:c8:10:02:84:7e:f1:1f:2f:24:61:
56:23:4f:0c:9e:bc:e3:a0:68:72:32:20:e5:a8:5d:
26:08:6a:e2:1f:ca:32:c5:8f:aa:d2:d8:3c:a7:73:
77:53:80:0b:8d:27:ce:a4:e5:6e:8b:cb:af:eb:e5:
0b:4b:9a:a3:e9:0d:76:c6:db:dc:35:87:6b:72:b0:
67:50:e9:8e:0e:28:c0:a5:2e:a9:3a:ff:76:20:10:
8b:83:21:69:db:91:9f:97:48:73:c0:be:03:d0:d4:
87:03:91:75:e8:b5:60:01:b6:e6:ce:a8:73:a4:d7:
e0:e8:d7:09:3a:26:a6:1a:20:03:d3:c0:8b:ca:f0:
e5:a5:e6:e8:d7:b1:a0:9b:7e:82:29:5b:54:63:7a:
94:32:0a:f8:f3:0b:bf:87:8f:78:c0:bd:bc:33:24:
c7:fc:85:52:5c:c0:ab:5a:04:46:60:8e:e6:b1:ec:
e7:75:6f:f7:9a:1f:a5:06:2b:df:fd:a8:7b:79:34:
95:45:0e:2b:e2:9a:ff:53:51:c3:28:dc:02:14:ab:
26:98:9a:99:40:9d:20:be:1c:b5:c9:d5:ae:3b:88:
1b:a1:3c:c0:82:8c:d9:54:6f:45:c4:18:c3:e1:2c:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:9D:3D:DF:72:1C:B1:A5:2D:73:DC:22:3F:32:C0:EB:CF:4B:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:da:bf:50:52:c3:e9:13:9d:41:dd:62:20:3b:21:0c:a1:89:
e9:73:48:8f:a4:74:e9:e4:78:34:1e:07:59:16:3d:bf:9e:65:
d2:c0:38:a6:cd:98:ae:71:2d:ba:19:7c:9a:f0:e8:ca:be:b3:
4e:c3:1e:ae:a8:6f:97:4f:96:68:07:30:93:82:ae:0b:b2:8a:
44:b5:db:5a:6d:01:5b:fe:a9:4a:5b:a2:ac:d5:4d:41:63:a5:
f5:8f:a1:45:76:34:e0:7c:53:3c:41:c7:2a:92:6d:18:87:a5:
3c:f4:18:d9:8b:61:bf:74:cc:c1:5f:0b:95:9e:49:28:13:03:
34:75:d5:df:30:ba:7f:77:1b:52:bc:fb:73:83:2c:21:36:fd:
eb:7d:9d:19:ef:70:45:65:c8:4b:8a:86:9b:dc:eb:6b:f9:c0:
00:0b:6d:0e:0f:bf:45:db:07:99:bb:60:18:d1:c1:6a:bc:ea:
23:a7:70:fe:75:4c:f2:b5:52:c6:12:a5:47:35:2a:c7:69:dc:
9c:a5:58:86:5d:db:27:e9:0c:aa:5e:33:45:3a:36:8c:83:9f:
52:c0:bf:b0:26:d5:fc:a9:e5:73:ea:e1:f5:30:0f:1a:ec:0b:
90:25:f3:da:62:4d:cc:6b:5b:de:1d:94:42:0e:56:21:f4:b5:
a7:08:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:51 2026 by rpki-client