
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa
File: ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa (raw, json)
Hash identifier: QbmQ536EHmEnPfws9pJrjAZ45jX948ECSvjx4s/L88I=
Subject key identifier: 33:80:84:DB:F9:24:E2:F4:4E:1C:17:92:B1:62:52:84:A5:1B:26:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D975569F596A46F6BE2571E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa
Signing time: Wed 22 Apr 2026 13:00:32 +0000
ROA not before: Wed 22 Apr 2026 13:00:32 +0000
ROA not after: Tue 21 Jul 2026 13:00:32 +0000
asID: 396551
IP address blocks: 2001:500:7967::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:97:55:69:f5:96:a4:6f:6b:e2:57:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 22 13:00:32 2026 GMT
Not After : Jul 21 13:00:32 2026 GMT
Subject: CN=97166c99-b145-4982-9b4b-b1de431ec75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:29:f0:38:9b:ec:39:73:26:27:12:3b:12:
f7:8c:3d:7d:1d:d1:a2:66:31:14:69:e3:b7:96:c6:
a8:47:66:6f:f1:62:b1:b8:01:15:56:6b:76:bb:04:
88:ab:cb:9b:b5:1c:7e:1d:7f:64:cf:4d:0a:f2:86:
95:2b:47:45:86:67:a2:bb:7e:8c:da:16:de:a8:76:
a6:87:3a:df:01:17:b4:00:77:bd:d6:fa:51:88:6b:
c4:ff:fe:63:c8:d2:0a:94:a5:a7:8c:ec:4e:9a:61:
4a:33:40:2b:73:d7:78:53:7a:3c:4b:78:5d:c1:fc:
1c:36:29:f5:8f:d7:44:fb:ef:1d:03:99:25:7a:c7:
4e:4a:5a:7d:03:7b:46:b9:65:56:3d:e2:7f:b3:8d:
f8:ee:92:10:a9:c5:72:f9:d9:67:36:1a:fc:9d:1e:
aa:b7:cf:21:a1:2e:55:2c:ba:92:c0:b9:69:24:0d:
ba:a3:20:62:28:46:f4:d7:bd:d7:6a:7c:3b:b3:16:
db:1b:96:29:2c:0e:3b:86:c3:5b:5c:87:7e:6c:69:
54:2c:46:6c:bd:00:b5:92:a4:29:48:99:1f:8a:01:
d4:10:a5:a0:0a:0c:06:a6:a3:d6:6d:d9:4d:3a:58:
a9:1d:8a:6e:74:b4:d7:5b:b2:72:78:9b:0b:dd:da:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:84:DB:F9:24:E2:F4:4E:1C:17:92:B1:62:52:84:A5:1B:26:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:66:ed:1a:b6:2c:e0:7b:4a:fb:27:64:66:38:4c:cf:b0:04:
40:5c:b4:f1:4b:86:89:dc:af:52:3b:0a:4e:ba:87:f2:17:3a:
be:3f:b5:70:fe:ad:c0:03:d6:0a:56:12:0a:74:58:49:92:20:
1b:91:af:db:4c:62:e0:25:08:1f:1d:54:50:5c:d7:d9:3e:2a:
79:89:70:d4:8f:c7:e6:e2:cb:a2:16:8e:7f:01:ed:8f:4a:d6:
af:ad:76:3b:4b:73:0a:df:aa:a4:bb:15:3c:f9:5a:b6:fc:8d:
cb:a5:5a:7c:e6:d3:b1:0e:ad:6b:56:be:bd:9f:14:5c:7f:04:
3d:b1:d5:d4:46:83:54:54:6d:2c:63:1b:9a:ba:79:5e:86:1e:
52:d9:ab:06:4a:45:2b:ab:49:89:76:b8:cf:2e:b9:7b:19:e9:
0b:3b:b6:a7:ab:82:37:5b:b0:01:d0:9e:e9:14:df:0a:83:d0:
73:bf:7e:40:de:42:c5:50:7a:2d:33:bf:7a:de:a5:f0:b6:63:
73:65:e3:68:64:78:34:62:59:d3:d9:36:a5:8b:16:8a:c3:07:
90:a2:63:6a:d0:f2:ca:36:a9:de:8f:b0:12:01:24:4b:0e:16:
5a:de:1b:19:ae:5c:d4:5e:68:e5:4a:11:86:50:b5:2e:7d:22:
b0:0e:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:11 2026 by rpki-client