
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa
File: d84700b5-be90-3712-8a4c-b001e65ca1f2.roa (raw, json)
Hash identifier: v80q1WZdUYfV1qFk7AKGQ4MigVdlMNJI3XPbRLEDr64=
Subject key identifier: A6:CC:FA:8E:54:E4:4B:45:AE:50:14:A3:9B:F6:47:26:93:42:0C:AC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0C036801EB4AEA244555D700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa
Signing time: Tue 03 Mar 2026 15:18:08 +0000
ROA not before: Tue 03 Mar 2026 15:18:08 +0000
ROA not after: Mon 01 Jun 2026 14:18:08 +0000
asID: 396600
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0c:03:68:01:eb:4a:ea:24:45:55:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 15:18:08 2026 GMT
Not After : Jun 1 14:18:08 2026 GMT
Subject: CN=efaf5c91-7cb4-4203-a37c-347a224168b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:f3:97:ef:7d:59:98:e4:51:18:1a:54:05:
a8:8e:6e:60:71:4f:f2:3a:75:4f:c7:d0:0f:fb:82:
af:5d:3d:79:73:29:39:50:4c:e4:2b:79:af:dd:7e:
b4:6d:6f:a5:a0:09:68:67:3b:53:1e:8f:57:e9:30:
c9:2f:3b:8b:7d:94:e8:86:0d:66:81:d7:69:71:49:
43:2a:30:57:73:7e:d4:96:29:e9:6c:45:f1:b2:d9:
8e:b3:fc:9d:0d:eb:85:0c:2b:36:97:fa:51:7d:82:
a7:62:28:56:e5:e8:7d:ec:25:f9:de:f0:cb:2e:fb:
3d:84:f6:a8:59:43:b9:84:98:25:51:a9:52:00:4b:
b9:c7:24:58:47:5a:0d:4d:af:87:21:70:da:2e:a5:
52:91:db:f8:f2:c4:1d:e5:90:7e:e3:5a:01:3b:89:
a5:33:fb:95:93:ef:d9:cb:63:fb:80:74:11:3b:2e:
23:7f:68:30:f4:8a:01:98:8c:ee:d2:1b:20:cb:f6:
50:0a:11:08:f3:d5:2f:26:fd:21:be:d2:b6:30:c3:
ed:a5:1b:a7:96:1b:b4:70:bf:c7:3f:96:c7:ea:18:
84:3c:44:dc:46:4d:83:9d:76:06:0a:f9:67:fc:8d:
54:d0:1b:d6:48:bd:e5:91:89:a9:0c:2b:8a:a4:68:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:FA:8E:54:E4:4B:45:AE:50:14:A3:9B:F6:47:26:93:42:0C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84700b5-be90-3712-8a4c-b001e65ca1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:24:01:72:da:a3:1a:c6:8c:59:b0:d6:00:4e:b5:fc:5e:86:
7d:0f:bf:93:7b:a1:94:e5:51:6d:9d:0c:16:3f:a3:a8:b9:60:
18:74:87:c1:99:23:2b:61:74:45:38:4e:43:90:da:2b:fb:ef:
e4:2b:2c:fb:fe:2c:1e:d6:8b:53:73:55:09:d9:22:14:38:96:
30:e9:fd:1c:f3:ad:86:01:10:97:3b:8f:af:8d:e1:fe:41:82:
28:2e:d7:39:82:cd:56:56:55:e4:92:1c:b3:7d:d5:17:5e:85:
c6:b2:80:08:cf:4f:35:58:b1:b9:69:6b:a2:53:43:d0:d9:4c:
1c:b8:40:cd:11:6c:1b:27:50:bb:1c:61:24:6d:60:3d:65:58:
4c:c1:87:05:07:1c:92:e9:6b:f2:93:16:27:99:cf:91:43:b8:
3f:5a:65:9d:46:a4:7b:ff:a9:44:c2:34:ed:a6:2a:4f:42:8e:
1c:cb:dd:7f:c8:4b:e0:6c:38:60:04:8e:a8:54:df:63:bc:c8:
db:1b:08:02:83:3c:e0:e8:3d:d8:e4:d0:62:2d:9e:94:62:0c:
53:15:31:21:bf:d4:25:b7:6f:c5:65:00:14:2d:de:e9:2f:60:
35:a3:25:1d:6d:2b:9f:c5:70:8b:2e:89:d2:a2:62:da:7e:a6:
f8:8f:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:31 2026 by rpki-client