
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa
File: cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa (raw, json)
Hash identifier: wwBBMTScHH42vHnLrxbVD14RgV2Ef9Oowj7IpurF8cY=
Subject key identifier: DD:7E:0A:74:E2:A6:C8:13:9B:77:3A:DE:FD:48:6D:08:95:C2:3F:FF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0BDD1AE5EE9F5BEDF49B8C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 396826
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:1a:e5:ee:9f:5b:ed:f4:9b:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=4b5df154-2864-49dd-b852-fce69cf1c2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:8c:37:8d:1a:5e:47:43:52:bf:ba:9f:f6:
51:0b:e8:a9:96:3a:18:17:54:f9:46:4c:c5:67:09:
93:5f:d8:95:39:22:9b:92:1c:6e:9b:10:72:fd:67:
8b:6f:11:cb:13:70:29:85:80:b3:83:56:b8:bb:10:
17:36:81:47:c1:22:e6:36:3b:89:48:f9:a3:60:03:
2b:32:bb:66:de:d4:b3:3b:ff:78:17:6a:e5:a9:57:
34:97:97:3b:ce:3d:56:fc:e5:ac:32:e0:25:68:a1:
8f:ee:42:71:d9:a9:13:fc:37:8a:ec:f5:73:24:e9:
e7:fc:99:84:96:d0:37:d5:99:3d:38:42:83:a8:d7:
9e:ca:13:a8:bd:71:5c:e7:81:7b:c0:7e:7e:15:61:
41:73:e2:60:7a:c3:de:0b:37:3f:58:1c:ae:2c:6c:
43:45:6f:0e:3a:80:d0:bd:f8:9a:a1:75:cd:02:fc:
43:dc:c0:4e:c3:f4:c0:11:55:43:89:f4:4f:07:84:
37:b7:2b:69:a8:d7:03:d4:28:2c:7c:84:c0:2a:04:
bc:40:8f:1a:42:99:12:3c:dd:37:a9:89:ef:f7:94:
49:d6:46:22:f4:37:6b:fc:18:d5:48:2c:70:45:ef:
b4:8d:63:ac:34:8a:db:bc:53:b5:9e:fa:72:f2:04:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:0A:74:E2:A6:C8:13:9B:77:3A:DE:FD:48:6D:08:95:C2:3F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:c5:8c:d6:f5:3a:26:58:92:ee:25:f2:3e:2c:29:4c:1c:b1:
44:b3:ad:f3:ce:2d:e0:25:67:ed:8b:02:fe:58:4d:97:32:ed:
af:f6:54:da:58:c4:af:ca:a4:7e:97:81:c8:c7:2d:66:21:fd:
65:f8:ed:f4:50:45:ad:dd:7e:36:47:b4:9e:99:d0:6a:bd:77:
ae:f4:f0:11:76:2f:59:a4:83:f6:26:be:fb:be:09:95:e0:82:
ba:f4:6d:20:17:a4:3b:b5:bb:45:b2:00:ae:ee:6a:ce:2c:4e:
39:a4:95:77:3e:86:57:f6:d7:6f:44:f7:a7:92:ec:35:28:7a:
d1:54:e5:1e:c9:5a:ca:b5:d9:cc:3d:ac:69:16:9e:1b:46:29:
53:01:b9:1a:a4:84:e9:d8:17:d3:6c:56:33:ad:50:b5:43:0c:
cd:3f:31:52:8f:a2:0d:7e:e3:59:34:05:5c:bf:03:f2:38:3d:
5c:af:b6:a7:a5:d7:14:30:82:c0:bf:ba:ab:b1:e8:6a:fb:a3:
1e:2f:c2:20:e2:85:85:22:14:e7:02:80:fa:ce:7f:eb:c1:90:
be:c2:09:9e:22:cf:0f:a7:61:d8:92:f7:b0:bd:ca:4b:a5:ca:
22:24:9b:06:79:7d:aa:b4:a9:70:e7:be:14:7f:5a:5f:41:9c:
d5:71:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:09 2026 by rpki-client