
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f394f5a0-6d40-3594-ba86-3572ef305499.roa
File: f394f5a0-6d40-3594-ba86-3572ef305499.roa (raw, json)
Hash identifier: 1tsUUzFpS1C1v/O1KZ67T7mdgVTG7YB4fNt0DFVdo4Y=
Subject key identifier: 89:36:E2:C8:D0:82:8D:CF:97:97:6C:0D:4D:AF:06:26:C1:5B:E0:2C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0BDD178A200117F6E8013640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f394f5a0-6d40-3594-ba86-3572ef305499.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 36623
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:17:8a:20:01:17:f6:e8:01:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=f8325f61-2a3f-4489-b5d0-0bdaf01eaebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:ae:23:81:76:5b:95:c6:57:7f:d5:fe:d7:
f0:cb:f5:16:1d:74:ff:0e:71:d5:b4:34:f6:93:49:
a5:67:67:3c:e2:90:99:57:f8:e5:62:89:2f:61:7a:
ae:c7:2f:be:33:b1:5c:68:62:52:d4:94:0e:a8:33:
8a:67:43:d6:7b:85:87:5d:d5:6b:a3:ca:9c:b7:ac:
fa:4b:1c:2f:15:ec:9d:92:d1:cd:60:0f:df:c5:1f:
1d:4a:29:d5:bf:25:8a:2e:9f:a5:cc:9a:bf:ce:37:
06:7c:88:75:b3:2c:b8:2b:18:40:dc:a8:83:90:b6:
d9:9d:b6:1c:9f:16:83:4e:c8:07:73:50:c6:4d:02:
89:d7:2e:67:1a:a9:a6:5b:3d:8d:8b:1e:54:1d:2e:
19:53:ee:0c:f4:44:5b:18:9e:a7:c5:70:a9:6c:3b:
36:75:a3:be:cb:52:f9:34:9f:51:35:16:fd:5e:41:
17:3a:b5:b7:46:1e:2b:ab:7c:5d:eb:65:8e:83:6b:
e4:bc:ed:3b:20:c5:0f:80:48:bb:75:0d:58:6d:0d:
e9:80:e2:35:04:78:44:9f:9e:36:55:e1:dc:29:4d:
f4:8d:3d:3e:00:22:d1:97:b8:5d:f9:1c:9b:68:4e:
d0:1d:2b:1a:2d:35:eb:53:00:a9:81:97:a5:11:cb:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:E2:C8:D0:82:8D:CF:97:97:6C:0D:4D:AF:06:26:C1:5B:E0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f394f5a0-6d40-3594-ba86-3572ef305499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:cf:3c:af:ea:4f:ee:9b:d7:d4:61:45:4a:38:f4:91:fc:23:
52:7b:02:74:3f:6b:a6:db:c7:bf:a8:e2:94:4a:80:d0:e2:4c:
64:78:4d:e9:d4:b7:93:c2:0b:da:b5:87:84:b5:81:8c:05:41:
5d:2b:c6:62:2c:1b:d9:cb:dd:a5:26:21:6e:5f:e4:7e:1c:25:
2f:8c:43:6a:f7:12:27:02:b5:4b:3c:5e:97:10:56:13:27:f5:
0a:6b:2e:68:af:ad:77:8e:b4:6f:0f:7a:d7:d0:eb:06:2e:fe:
b7:45:76:a0:c6:e5:d9:50:65:ce:62:f5:70:f5:0b:3d:41:24:
5d:f0:3d:58:66:fc:de:bb:b9:c1:fd:44:e6:37:0a:29:4a:8a:
b7:01:70:fb:53:ff:34:c5:12:72:a9:b8:f6:bc:6a:1a:f5:bf:
bf:53:1d:92:ba:89:76:cd:b7:75:0a:18:a5:90:bc:ca:f2:e8:
3a:ea:d6:a7:86:d3:71:11:61:59:e1:d2:32:bb:59:06:77:bc:
e9:cf:18:fe:9a:47:4b:3d:d7:37:1c:34:10:88:97:12:e8:90:
ef:22:c9:c5:06:a2:3a:19:b5:03:48:25:29:d9:c5:94:5e:fc:
de:38:20:8f:64:3a:0d:af:2c:b4:18:da:48:c8:55:d2:7e:17:
07:ac:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:58 2026 by rpki-client