
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb49cdf7-3291-3ea1-b96a-5ad5268d670f.roa
File: cb49cdf7-3291-3ea1-b96a-5ad5268d670f.roa (raw, json)
Hash identifier: 4QGUu2FDwYy6vZRd51iPD0wi4nobSdRlvfQBUCbt9Uc=
Subject key identifier: E2:5F:1E:13:27:34:68:20:AF:A9:7E:BC:34:12:68:72:3D:D8:6B:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E6F3EB9343B2416377AB97340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb49cdf7-3291-3ea1-b96a-5ad5268d670f.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 20431
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:b9:34:3b:24:16:37:7a:b9:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=e8db4526-f26a-4322-9e3f-0174f6bdac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:1d:cc:fe:7c:dc:43:b5:7d:fd:8d:19:be:
bf:83:2a:69:72:0a:69:84:1c:3f:e6:a9:4b:b0:4e:
a3:8f:4a:18:ac:0b:86:1f:94:a7:87:9c:0d:b6:59:
52:57:4f:82:b9:00:3f:e3:24:55:0d:f7:f6:a8:dd:
84:51:bb:09:76:06:c1:5c:32:5d:a9:69:d4:9d:62:
3a:02:3b:29:bd:a3:1f:54:a0:8c:bc:84:c9:19:41:
45:12:a3:52:77:30:99:59:8e:a5:72:65:4e:d4:e7:
18:5a:03:71:18:0a:9d:70:67:da:54:67:3b:0c:2d:
64:73:c5:fd:cb:af:e3:6e:90:00:7d:f9:d5:85:f7:
b7:00:8e:06:35:72:2d:e8:de:b4:40:c0:e6:49:8e:
f7:7a:05:e2:85:4c:c2:5e:70:87:6c:4a:2a:50:b9:
7a:fa:82:05:72:a7:32:bf:b6:d3:40:62:27:d3:0f:
23:ae:c6:42:20:aa:e0:07:cb:fa:3a:25:d5:c3:20:
26:17:dc:8f:12:51:e0:aa:9b:a3:f6:f0:57:1e:fc:
4d:5b:e9:9e:74:5d:9a:b6:77:72:f1:5c:28:9c:37:
0e:e5:6c:2f:8a:2d:9e:89:7e:7b:19:79:49:8f:ad:
27:79:91:e1:7c:1f:1b:45:87:03:5c:c5:08:d4:5d:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:1E:13:27:34:68:20:AF:A9:7E:BC:34:12:68:72:3D:D8:6B:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb49cdf7-3291-3ea1-b96a-5ad5268d670f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c5:34:fd:6e:0b:1b:62:65:21:da:15:41:16:33:28:7c:a5:
b6:6a:a7:ad:ea:bf:2e:4d:c6:e7:b5:d7:32:75:d2:05:7b:4c:
96:9a:bb:3d:6e:81:a5:d8:86:44:bf:51:62:bb:ac:f3:4d:18:
45:3d:48:d4:1a:76:fb:f8:63:e5:7b:d1:f7:87:5e:37:02:ed:
00:32:d7:01:72:b9:f9:71:aa:62:0d:be:23:94:48:1c:63:9d:
42:15:f6:a4:3a:f9:a2:03:24:50:79:23:6d:cd:df:25:5b:2e:
b1:58:16:90:ad:77:cd:3a:5d:d6:ba:ba:a1:da:b6:f8:9f:61:
08:41:4d:da:a0:7f:b7:56:56:0f:fc:2d:3f:9c:92:54:9b:72:
78:38:71:73:72:96:22:a1:c4:be:50:74:33:b7:9b:06:9a:ef:
89:2e:e2:21:09:2e:1b:c9:ec:4f:98:02:ac:c5:0d:a2:df:54:
c2:3b:71:7a:1e:16:7a:9b:0b:c5:7c:45:19:0d:29:d8:35:ff:
ba:dd:2c:2f:35:63:7d:5f:2b:ca:1e:78:7f:88:ec:ce:8b:f8:
28:d1:99:79:a9:fb:a7:00:4f:03:65:a6:35:bc:8c:9d:47:1b:
65:52:25:79:43:85:31:a7:e8:a9:89:00:8a:8e:ab:2a:ab:b6:
5e:0c:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:05 2026 by rpki-client