
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa
File: 0d71d168-9e9a-355b-800e-e9001e914220.roa (raw, json)
Hash identifier: fLQA/xMBUSGKxTnSsPVROKsJP9gwnoj36vhq7CcjLdQ=
Subject key identifier: 0C:4B:DE:49:3B:41:37:F6:23:84:09:BC:D6:48:C3:12:91:FC:3B:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D86956BE54F73E7C2BD75AAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 396551
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:6b:e5:4f:73:e7:c2:bd:75:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=afb76217-af39-478d-bd5f-9536050273c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:2e:6e:6d:fb:55:09:1b:4a:a7:2e:16:04:
65:be:ee:d3:49:24:b3:f2:dc:e2:14:2f:02:2e:ec:
23:e3:2e:c3:3a:51:c0:6a:6b:7b:2f:fb:bb:de:9a:
82:6f:e5:4d:b0:c1:fb:f2:9d:9f:ff:9a:4c:4b:0d:
17:5d:45:e7:d0:cc:62:6f:7a:f6:2b:f4:e5:e2:0c:
13:83:04:4f:93:49:d5:c8:ad:35:3d:04:66:ca:48:
c6:14:c5:82:a3:da:df:02:f7:39:8f:a4:65:87:02:
3e:20:1b:f5:1a:63:e0:c1:05:dd:c7:50:58:55:d9:
61:e6:78:37:12:04:5e:69:87:e6:21:dc:d1:14:b6:
47:95:d1:32:50:27:4d:fb:6b:03:c7:89:29:31:1b:
dd:b7:29:5f:70:55:01:7d:78:a3:9f:7b:65:d6:ca:
94:51:2a:87:e8:ec:5b:fd:52:ec:63:b1:e6:09:21:
a2:d6:fc:40:49:39:8b:6e:da:bf:41:c7:12:99:50:
09:cb:13:27:b0:9f:98:05:fb:2b:7b:60:88:c0:11:
fa:ce:5d:74:84:56:40:be:cf:01:89:66:b5:e5:81:
67:d2:a0:e7:da:1b:66:d5:a3:c2:84:14:9f:69:35:
9d:16:70:16:b8:8a:59:f9:d7:96:ab:b3:fd:25:5f:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:DE:49:3B:41:37:F6:23:84:09:BC:D6:48:C3:12:91:FC:3B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d71d168-9e9a-355b-800e-e9001e914220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c1:e2:ec:4b:95:da:b2:3e:1b:23:45:93:91:b9:90:cf:17:
c3:35:08:73:be:ed:1d:24:cb:39:ea:f7:bc:8c:c9:1d:4f:8c:
60:5e:db:39:2e:5e:58:ee:83:85:9e:3a:fa:c4:a5:c9:bc:f5:
02:09:2f:f0:53:08:31:5f:b5:de:84:4a:0e:99:fa:bc:fe:29:
dd:39:d0:5e:82:24:83:48:48:f9:99:96:20:93:c8:54:4f:5d:
c6:d6:d3:5e:3a:d7:db:0f:15:fd:a0:55:5d:31:fe:d2:5d:94:
cd:c5:2a:29:62:19:67:ca:90:b5:6c:3b:c1:ca:dd:37:ce:46:
08:e8:66:55:89:0a:d6:e4:4f:c8:69:52:c1:36:7d:c1:31:6d:
0e:c1:d4:b9:17:e9:13:85:6a:ad:c9:be:29:ff:2b:7f:af:13:
36:a4:08:bc:1f:b7:ee:45:b1:bd:a2:e1:d3:6f:7a:64:3f:d8:
b9:c2:88:c0:74:90:22:f8:82:ef:e6:4c:80:7d:2e:ba:25:64:
fb:c9:36:a9:ca:e5:5c:00:84:de:f8:cf:19:16:8a:f4:75:1c:
9c:f6:ca:49:90:82:8f:ea:83:c6:69:41:02:45:d0:2c:76:3b:
99:fe:c5:71:c0:d8:14:ee:88:7e:db:76:c1:af:79:81:8c:d2:
29:0a:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:23 2026 by rpki-client