
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9e2688-3135-38fc-b67f-f73c7968fda4.roa
File: 0c9e2688-3135-38fc-b67f-f73c7968fda4.roa (raw, json)
Hash identifier: nV/kmxyVEb9avffoPF+TLvVnvIoH6jjyISNwX6k/Q3E=
Subject key identifier: 8A:70:BB:A2:EF:95:AD:83:3B:F6:CD:53:D0:24:99:78:BF:2E:A6:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D6DA19E9D81A3559C77D68800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9e2688-3135-38fc-b67f-f73c7968fda4.roa
Signing time: Tue 07 Apr 2026 14:30:20 +0000
ROA not before: Tue 07 Apr 2026 14:30:20 +0000
ROA not after: Mon 06 Jul 2026 14:30:20 +0000
asID: 36628
IP address blocks: 2001:500:13f::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:a1:9e:9d:81:a3:55:9c:77:d6:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 7 14:30:20 2026 GMT
Not After : Jul 6 14:30:20 2026 GMT
Subject: CN=72af6b3d-a763-4c66-96a6-c455be195c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:bf:06:01:a4:31:c3:6d:dc:a4:d3:74:09:
dd:02:78:6b:cc:e4:24:d5:de:03:38:92:4c:7e:24:
79:5c:20:85:8d:88:9f:58:87:ad:2d:21:93:9b:2b:
73:0f:03:a6:34:41:8a:6c:4f:b5:dc:61:12:5f:39:
0b:ed:fa:1c:f2:72:e0:43:af:02:05:01:46:dd:9c:
64:e7:90:8a:55:11:8e:61:4c:4e:e6:9b:d3:11:ce:
d3:61:2e:8b:c6:2f:e6:09:74:88:af:68:de:4f:7f:
5d:cd:46:0c:33:8d:ea:be:44:3b:cf:1d:56:93:0a:
50:3c:fe:49:c3:cb:d7:e1:a5:b7:3b:6b:54:44:9f:
69:34:57:c7:53:a3:db:b4:e2:f2:3d:a2:67:e7:67:
10:7c:e3:c7:7c:39:b9:07:38:07:bb:1e:f9:76:65:
8c:67:ae:72:df:e7:db:a5:8f:1c:da:6e:e7:34:8b:
45:a5:9a:cd:c1:8b:af:20:23:6f:75:54:d0:a1:0f:
f8:c0:8d:77:a8:ab:c9:6d:b9:40:af:1b:b6:3a:ee:
da:c8:e8:34:e1:e3:d3:58:de:6c:36:a6:93:6c:82:
a2:1a:1d:46:a2:cf:2a:d0:fc:b0:d3:a6:3b:73:09:
fa:1b:86:ae:f0:65:9d:ac:08:31:78:ad:1b:63:64:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:BB:A2:EF:95:AD:83:3B:F6:CD:53:D0:24:99:78:BF:2E:A6:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9e2688-3135-38fc-b67f-f73c7968fda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:13f:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:55:27:d3:46:7b:8b:fa:00:54:11:41:94:7a:4e:97:4d:aa:
2b:f1:bf:bf:8d:1d:b9:59:67:8c:ea:75:c5:2d:fe:76:78:64:
22:24:2c:1a:c7:2d:21:7c:82:c9:07:41:e8:a8:55:e7:d8:93:
8d:06:c7:e4:1b:97:4d:c2:65:17:1a:b6:16:f2:5c:2f:69:f4:
f8:f2:25:b3:eb:f4:7a:7d:3f:ac:a7:42:cf:bd:b3:8c:a4:83:
6f:bc:c0:0f:eb:e0:da:94:35:ad:be:8d:dc:ae:b6:9e:af:0c:
49:00:5b:de:af:13:ac:8a:97:1d:7e:68:8e:07:4d:f6:df:de:
81:3b:48:43:4b:d3:54:8a:e2:a2:ed:c9:5b:2e:f4:31:c4:64:
a2:5b:0b:d9:09:00:52:cc:7f:4c:85:bb:ef:65:51:e1:b0:30:
48:34:85:f6:c3:17:95:3a:34:4a:4a:be:da:ea:da:17:43:6b:
33:5e:24:8b:1f:64:b9:f9:39:82:1f:66:6e:56:4d:15:2b:86:
5c:8c:04:f2:f5:51:5b:cf:25:94:66:22:02:c1:4f:bd:ba:9a:
0d:91:fd:cc:ba:17:07:0a:97:85:8f:42:52:45:84:ef:de:a6:
14:d1:4b:c9:30:f3:8c:c2:3b:ee:97:30:d9:4f:0a:af:7c:cb:
8b:58:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:05 2026 by rpki-client