
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068a5cc4-8f45-3136-8f6a-5a77642ee4fd.roa
File: 068a5cc4-8f45-3136-8f6a-5a77642ee4fd.roa (raw, json)
Hash identifier: JaNrPOmQ6zc2bzaF3GEQS97hMTE55CBrUKzmQIDr19I=
Subject key identifier: 00:FE:85:5C:26:0D:7F:C3:F8:53:77:03:70:16:63:34:CF:A3:FA:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D732BD8E1D4990BBCEAE9DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068a5cc4-8f45-3136-8f6a-5a77642ee4fd.roa
Signing time: Thu 09 Apr 2026 14:07:53 +0000
ROA not before: Thu 09 Apr 2026 14:07:53 +0000
ROA not after: Wed 08 Jul 2026 14:07:53 +0000
asID: 36622
IP address blocks: 2001:500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:2b:d8:e1:d4:99:0b:bc:ea:e9:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 9 14:07:53 2026 GMT
Not After : Jul 8 14:07:53 2026 GMT
Subject: CN=a226c6c6-9597-478b-9676-cecbdc5f6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:db:ea:f2:ae:14:9f:20:af:cd:66:d1:0b:
be:ba:c5:52:f3:a6:cc:0e:da:70:cc:12:24:30:bf:
b9:ef:6c:ef:b7:59:b6:63:fa:73:48:8e:1f:63:6a:
38:1d:5a:d3:26:d5:1f:24:0f:2e:d0:02:3b:d1:16:
66:64:96:e0:eb:e4:fe:9f:e8:aa:4a:17:68:77:36:
df:6e:5d:a5:43:18:22:75:1f:6a:18:5d:5a:92:f6:
6f:f2:33:2f:a9:5c:ea:79:26:a8:da:2b:a6:6d:f2:
8c:53:99:1e:e9:e2:9b:15:5c:70:55:a2:95:41:d2:
b5:0e:31:72:9e:c4:e4:99:9c:c8:b0:ff:04:61:c1:
bb:cb:73:98:6c:f9:4b:5c:52:d2:90:fb:f5:6c:2a:
d2:b4:ec:47:1a:5a:6e:3f:7b:b5:6a:91:96:6e:65:
a4:14:9d:05:94:ea:9d:88:d3:74:e6:71:b1:31:f1:
bc:f7:a5:50:f0:d2:9b:ef:49:9a:5a:79:ef:c1:c0:
54:63:ec:ea:b4:35:d1:3f:1c:08:0c:28:0c:e0:06:
2d:85:38:4d:c0:29:25:e5:5d:03:33:75:ea:b3:40:
4a:29:e7:b0:f8:47:03:c2:f8:97:7f:8f:19:7c:40:
89:2e:28:48:c1:c1:96:f9:6b:71:f6:3d:8d:5e:f3:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:85:5C:26:0D:7F:C3:F8:53:77:03:70:16:63:34:CF:A3:FA:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068a5cc4-8f45-3136-8f6a-5a77642ee4fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:13:78:6e:27:87:41:8b:95:6c:d7:aa:da:6b:cf:06:bc:76:
3d:81:e9:e3:80:99:02:7f:58:91:da:bd:0d:7d:d4:5c:39:81:
7a:02:61:c7:50:f8:ca:95:b8:ea:d8:dd:83:90:55:d8:c9:82:
43:bb:58:bf:35:f3:87:90:3b:96:39:ab:19:d5:a7:90:ad:9c:
af:c2:40:a5:3b:42:af:d9:26:bb:14:83:d3:04:b7:16:0c:ca:
0d:bf:65:02:7c:dc:cf:57:f4:4b:33:98:91:c7:e9:cf:12:49:
94:17:51:01:b0:6f:9e:12:73:16:2e:2e:38:a4:d5:fc:ee:d2:
4f:5e:2f:52:77:a4:e5:ed:35:86:30:8b:06:bd:9d:89:c8:5a:
50:8f:b2:71:c2:80:01:1a:e5:53:77:8c:e4:ea:20:ba:fa:af:
6f:9e:1d:8d:00:81:21:8c:f4:47:46:d9:ca:a2:ac:71:ab:2c:
79:b4:01:82:d9:98:4b:bc:bb:a9:66:79:d9:6f:34:08:99:ce:
8a:84:69:d2:ba:b3:ba:73:c5:55:1e:3c:7f:2b:97:73:80:9f:
88:69:55:12:39:87:b3:a6:ea:92:04:76:78:41:51:84:86:36:
f7:00:37:ba:dc:5e:55:ee:6e:49:98:f3:3e:89:3f:dd:84:30:
44:55:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:26 2026 by rpki-client