
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa
File: d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa (raw, json)
Hash identifier: RpsswN+R4A3CID40j37yYN3ufCmvaWaYKrhsDWM+/ls=
Subject key identifier: 2B:F8:7A:6A:C6:03:C5:78:58:AB:9C:47:C6:9F:19:84:37:76:8D:A9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9B854E7CFB65A2870C7D7D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa
Signing time: Fri 24 Apr 2026 01:00:23 +0000
ROA not before: Fri 24 Apr 2026 01:00:23 +0000
ROA not after: Thu 23 Jul 2026 01:00:23 +0000
asID: 397211
IP address blocks: 2001:502:7094::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9b:85:4e:7c:fb:65:a2:87:0c:7d:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 24 01:00:23 2026 GMT
Not After : Jul 23 01:00:23 2026 GMT
Subject: CN=c1b8da55-35cc-4e7e-9a74-51ae01cbe157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:1a:e4:83:ff:08:c3:bf:33:ee:c5:db:85:
94:e1:b6:7b:83:f5:dc:54:60:f6:35:9b:97:d2:c9:
dc:d8:7b:93:e6:c8:8e:01:14:1e:15:25:e9:7c:e2:
57:ea:4c:7d:b1:13:76:cb:6a:63:8f:9c:b3:35:26:
f5:12:20:28:b6:32:87:be:1b:4c:1f:10:9b:0c:32:
82:56:c4:29:1a:80:67:66:51:7b:c7:83:8f:59:31:
bb:69:c0:97:eb:58:22:f1:b4:e8:85:7f:71:df:f2:
b7:4c:ae:f5:44:d6:c8:ff:59:b2:a9:25:72:46:60:
3f:ee:3c:1e:af:24:b4:6a:d2:da:7b:da:0e:65:07:
b7:b3:6d:6a:47:06:dd:f7:a6:dd:df:29:61:ac:d6:
d0:cf:26:06:10:86:a1:6f:fc:be:6b:9f:dd:20:56:
54:09:09:ef:5e:f8:96:06:2f:b7:8d:8e:af:99:5b:
a7:3c:48:b0:9e:cb:19:3e:12:86:43:c2:7a:a4:f7:
bb:ce:18:dc:e6:b8:7d:b0:8c:6f:a9:85:13:c3:b2:
e7:b9:dc:0c:ce:95:6b:db:5c:0b:5e:ef:f5:90:b6:
8e:1c:35:58:d4:3d:a7:04:cc:17:b3:5c:12:54:d6:
c2:fd:57:a7:2e:17:73:5f:67:e9:d2:48:39:30:db:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:7A:6A:C6:03:C5:78:58:AB:9C:47:C6:9F:19:84:37:76:8D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:7094::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2c:74:ef:58:ff:89:b4:ec:03:4a:96:c8:66:f1:19:e8:69:
d0:19:c6:8d:03:45:eb:44:c1:1a:c6:12:01:13:a5:f5:84:c3:
9e:3d:33:5b:90:21:75:63:80:d3:7d:72:80:19:01:7c:56:66:
bd:a1:d6:59:5e:2d:ea:a8:08:70:b7:93:91:12:63:d0:da:54:
00:fe:36:ba:29:62:db:d5:3d:81:e6:1b:37:05:a7:77:19:32:
4e:56:09:7e:90:d0:42:1d:12:ee:3a:d2:e4:c3:3d:1a:61:52:
10:50:e7:c1:8c:f1:5d:d5:b4:fd:d6:41:3c:12:d9:b6:70:b2:
71:08:91:b7:e6:c5:31:c7:b4:c7:39:dd:e2:04:65:1e:fd:c1:
7b:42:0b:76:ce:4a:c3:be:4d:d3:d8:20:04:d0:12:25:fb:77:
53:1f:0d:9c:7e:4a:62:1e:da:78:58:54:b7:24:87:2c:95:8d:
58:4d:b3:10:bd:93:12:b9:f6:c7:d8:cc:01:af:f0:b1:2a:20:
2b:4e:38:5d:49:2b:15:93:83:ba:bf:15:a2:9c:3c:5c:f0:b1:
8b:90:50:f9:50:98:3a:4b:ce:ff:a7:72:3f:60:61:1c:5b:4d:
20:28:fa:83:79:d4:f2:c1:11:02:5b:69:3d:97:40:97:c7:77:
47:bd:d5:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2bhU58+2Wihwx9fQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
YzFiOGRhNTUtMzVjYy00ZTdlLTlhNzQtNTFhZTAxY2JlMTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyga5IP/CMO/M+7F24WU4bZ7g/XcVGD2NZuX
0snc2HuT5siOARQeFSXpfOJX6kx9sRN2y2pjj5yzNSb1EiAotjKHvhtMHxCbDDKC
VsQpGoBnZlF7x4OPWTG7acCX61gi8bTohX9x3/K3TK71RNbI/1myqSVyRmA/7jwe
ryS0atLae9oOZQe3s21qRwbd96bd3ylhrNbQzyYGEIahb/y+a5/dIFZUCQnvXviW
Bi+3jY6vmVunPEiwnssZPhKGQ8J6pPe7zhjc5rh9sIxvqYUTw7LnudwMzpVr21wL
Xu/1kLaOHDVY1D2nBMwXs1wSVNbC/VenLhdzX2fp0kg5MNtT5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCv4emrGA8V4WKucR8afGYQ3do2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQ5NThjMDItODNhMi0z
MGZiLTkxYjItYzRjN2E4YzZjYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAsdO9Y/4m07ANKlshm8RnoadAZxo0DRetEwRrGEgETpfWEw549
M1uQIXVjgNN9coAZAXxWZr2h1lleLeqoCHC3k5ESY9DaVAD+NropYtvVPYHmGzcF
p3cZMk5WCX6Q0EIdEu460uTDPRphUhBQ58GM8V3VtP3WQTwS2bZwsnEIkbfmxTHH
tMc53eIEZR79wXtCC3bOSsO+TdPYIATQEiX7d1MfDZx+SmIe2nhYVLckhyyVjVhN
sxC9kxK59sfYzAGv8LEqICtOOF1JKxWTg7q/FaKcPFzwsYuQUPlQmDpLzv+ncj9g
YRxbTSAo+oN51PLBEQJbaT2XQJfHd0e91fk=
-----END CERTIFICATE-----
Generated at Wed May 13 08:14:53 2026 by rpki-client