
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa
File: d9b147c2-b75f-3915-ae7c-3d41e4313208.roa (raw, json)
Hash identifier: vQdhl3mgSZTYOjE6LFx0QP2bSQUxpo8YzmRF322wNX4=
Subject key identifier: 54:97:D9:CF:0E:F6:89:D9:4B:92:BF:2C:B4:7D:91:C8:5A:1B:09:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D32F5A7F31BF25A5BDC672E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa
Signing time: Tue 17 Mar 2026 14:06:58 +0000
ROA not before: Tue 17 Mar 2026 14:06:58 +0000
ROA not after: Mon 15 Jun 2026 14:06:58 +0000
asID: 396572
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:a7:f3:1b:f2:5a:5b:dc:67:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 17 14:06:58 2026 GMT
Not After : Jun 15 14:06:58 2026 GMT
Subject: CN=2058f1ab-b0a7-430e-85ef-16801b7c84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:32:4d:c9:89:77:81:d9:72:cd:17:56:18:
54:76:70:92:3e:70:e4:db:7a:02:e3:ab:ec:da:35:
4b:eb:3f:b9:68:c1:09:f7:a2:8f:cb:f6:41:1e:36:
79:58:7f:b5:7b:5d:2c:da:5f:43:20:42:c6:e3:71:
4f:78:71:29:12:0b:6e:24:79:e7:9b:47:4d:ca:15:
04:37:7d:21:f4:66:98:19:c0:52:c2:c9:cb:34:ca:
3b:bb:96:aa:d6:8b:63:0a:52:a2:8f:b1:5e:ad:9f:
e4:7e:4e:f3:32:59:b3:da:44:94:17:44:b3:e1:d6:
b8:16:61:5a:74:51:7b:f8:f3:70:96:ab:bf:21:79:
1f:91:d6:12:93:ee:a9:b8:68:53:62:83:69:02:69:
b1:1e:62:6d:a7:62:16:96:58:62:5c:ab:dc:fb:e1:
98:c4:35:e1:64:e6:21:e8:4b:92:2d:c9:13:24:2a:
58:5e:b4:d1:04:71:b8:99:b8:97:e9:4c:0c:81:fc:
77:16:1f:49:ca:c3:97:7f:be:3c:f8:b1:ab:42:8b:
c6:c2:1b:e3:41:9e:b4:6d:5f:86:06:0f:de:71:ee:
5f:ce:d9:b1:6c:e2:85:4a:17:11:df:b5:02:dc:ae:
4f:c1:fc:f1:e9:fb:3c:8f:88:a4:f7:0a:3c:a9:a7:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:D9:CF:0E:F6:89:D9:4B:92:BF:2C:B4:7D:91:C8:5A:1B:09:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b147c2-b75f-3915-ae7c-3d41e4313208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ba:0d:a6:5f:b4:ba:ab:55:8c:ac:fb:a8:66:da:db:02:bb:
3c:6e:47:28:9d:57:0a:3b:6b:32:e4:35:7e:68:10:12:6c:96:
4e:bb:f7:7f:88:43:81:a5:21:10:16:4a:e6:52:58:60:b4:21:
d9:de:0e:68:76:17:bd:fa:fe:be:22:6c:4c:e8:f1:5d:78:1f:
cc:45:4e:d6:cc:87:31:e8:8b:75:9d:bf:ea:c8:ad:68:0e:e4:
7e:2a:9c:b6:bc:77:74:78:34:be:7e:3f:fd:d0:17:2f:28:dc:
92:13:29:13:61:18:90:0b:f7:09:bf:e3:a2:e7:0d:ee:9b:d7:
c4:83:c2:fe:f3:c5:29:43:e1:56:36:ee:a8:2a:e6:94:3f:5f:
e7:2e:be:be:39:44:0a:d8:81:67:f9:01:07:e8:49:9e:ab:a6:
f0:ea:d7:14:00:5f:87:c7:bd:79:79:53:4f:b2:fc:27:2a:ab:
3f:dc:a7:72:e6:91:d0:cb:70:96:1d:ad:36:1f:97:00:90:74:
44:b2:70:ee:34:4f:f9:8e:a3:98:8f:a3:fe:cd:3d:d8:a1:dd:
f0:ba:4a:3a:12:a5:e1:f5:a1:c3:ea:e3:31:22:e9:0f:8d:7b:
d8:2a:47:d6:22:ed:30:89:a5:99:e4:52:e6:72:80:4e:72:ea:
a3:1d:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:23 2026 by rpki-client