
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9a7f49-e223-3474-bf42-c908435131a4.roa
File: 2c9a7f49-e223-3474-bf42-c908435131a4.roa (raw, json)
Hash identifier: zT4x86dFU98IMIyfF26CxReW6AsX6/TzgoL5RGMyzo4=
Subject key identifier: 0F:12:43:C2:C6:EF:E2:1E:19:A4:0D:4E:AB:D4:97:10:82:5E:61:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CFE0B34EAB83E88927F0FD100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9a7f49-e223-3474-bf42-c908435131a4.roa
Signing time: Thu 26 Feb 2026 15:12:32 +0000
ROA not before: Thu 26 Feb 2026 15:12:32 +0000
ROA not after: Wed 27 May 2026 14:12:32 +0000
asID: 40647
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fe:0b:34:ea:b8:3e:88:92:7f:0f:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 26 15:12:32 2026 GMT
Not After : May 27 14:12:32 2026 GMT
Subject: CN=5357ea04-6c9f-4734-980d-80da343e3f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:21:fd:62:ec:ea:1f:ad:00:58:52:82:c2:
e1:ad:16:0e:04:51:62:57:e8:0b:e5:0a:f2:c0:1e:
b3:4c:55:2c:f1:84:4f:5b:2e:59:9f:b1:68:8b:ae:
fc:96:3e:84:e7:41:e5:4b:75:a1:30:e8:49:59:9c:
b9:20:eb:ca:01:02:17:ef:53:1b:34:74:96:55:6b:
28:0e:1f:e6:40:b6:df:4e:e2:78:b1:7e:f8:de:eb:
11:95:34:12:0a:4d:1f:96:e1:4b:6b:db:e1:b8:2e:
bb:42:eb:71:7c:2a:7f:07:4a:c0:96:44:65:72:bc:
ac:c6:bc:7f:e5:cb:d2:dc:68:a3:ab:19:18:79:d9:
4c:09:1b:4b:35:2c:eb:86:69:6b:b3:09:03:6e:8d:
60:94:50:e9:cf:7a:a3:5a:1e:97:4e:f1:a4:38:ba:
57:7d:8a:b1:5d:89:f8:47:b4:6d:9f:68:e8:51:b9:
3c:ca:d1:cd:f0:a4:0d:79:67:34:f4:c9:c8:37:93:
2e:a0:61:0c:e7:b9:fa:1b:73:ec:ce:6a:07:8e:6d:
44:50:d8:fd:37:94:01:81:52:f6:e9:50:ea:7a:d5:
a7:63:e0:63:01:7d:9c:c8:4f:42:33:be:66:8e:fe:
2e:a1:36:57:7f:3d:3a:48:a2:9a:fe:97:e5:3b:94:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:12:43:C2:C6:EF:E2:1E:19:A4:0D:4E:AB:D4:97:10:82:5E:61:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9a7f49-e223-3474-bf42-c908435131a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c8:49:70:9d:af:e8:8d:e9:0d:b0:0c:8c:84:e6:ea:cc:31:
ba:7f:9a:c1:1a:83:74:d1:98:83:0f:ff:72:3a:f6:8f:70:1e:
5b:4e:7c:dd:d0:04:31:57:14:a4:e2:70:10:df:f5:0e:e9:0c:
6e:04:47:d2:d0:06:b8:c5:48:b1:ac:aa:6d:6a:f7:16:92:3f:
c8:ad:8b:a1:d9:b6:ce:1a:76:95:8c:0b:cb:90:f1:38:d4:68:
ea:e3:4f:08:7d:ff:be:cb:3e:bd:b4:74:72:58:f2:35:e9:2d:
c5:f3:f6:ed:d7:ac:2a:e8:c3:dd:28:20:34:ff:a3:23:47:e4:
9d:97:cb:c4:6e:de:d9:23:34:5e:97:ef:3d:cf:46:ec:26:e6:
d7:1f:dd:2f:cd:d7:8f:e4:08:79:37:5f:13:de:ef:06:53:d5:
01:56:93:ba:90:c7:07:25:14:81:8c:d8:82:85:4d:f7:74:da:
75:b2:f7:81:f1:8f:d7:4c:00:56:e1:22:76:66:b8:64:1f:70:
d6:c3:8f:00:b3:7e:aa:84:76:4e:bf:28:fa:4a:a3:79:b9:2f:
92:7c:b4:a0:a4:f7:34:74:7a:8b:a7:82:a5:4c:fe:4e:01:2a:
01:02:21:cf:d1:ed:9e:36:55:7b:b1:19:62:9d:c4:ad:ff:c4:
30:07:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:48:04 2026 by rpki-client