
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa
File: 2caa4591-ff02-36bf-a82a-f91399c38ea6.roa (raw, json)
Hash identifier: XlzMlKxrNM3b1O5iyyykPeb9TqHA4JMLIYcUyeftdcQ=
Subject key identifier: E6:58:77:8C:DC:49:90:55:D8:B8:78:E7:91:AE:D0:A5:0D:5B:53:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E059C803AB4F51B963E937D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 396602
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:80:3a:b4:f5:1b:96:3e:93:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=bbcbb764-fbd2-4fc1-94ae-110304c9160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:42:68:ba:bc:93:47:9c:8f:37:19:64:90:
be:9b:a0:77:a1:0b:67:52:56:cf:cc:63:c2:30:b6:
b9:6e:f8:42:10:4d:4d:3e:f9:d0:af:2e:d2:9f:1a:
31:ad:69:d8:70:d4:fc:1a:d0:2c:80:c1:6c:86:6f:
eb:5e:a0:82:5a:b5:54:f4:44:ce:86:64:48:7d:ff:
e8:e4:c2:5c:87:48:8e:48:2e:2d:b6:a0:7e:c0:6b:
78:43:e9:e7:7d:ed:23:5f:8b:1d:f5:1f:82:8a:8e:
f8:61:c0:f0:42:d8:f1:89:e3:48:1e:eb:59:20:78:
5e:82:d4:38:76:71:a1:90:40:7e:0e:30:0d:86:0d:
34:2e:e9:e9:5c:d0:cf:92:e2:44:7a:f0:4b:56:f7:
82:47:6a:08:14:87:46:30:66:ef:bb:16:60:a0:a1:
2d:92:08:66:c5:26:3a:4c:bb:f9:be:ca:97:b4:6a:
d6:59:7a:04:38:e5:e3:5f:67:d2:4c:f5:4b:d8:ce:
83:3c:10:e7:75:18:02:d7:fc:cc:2f:db:41:f1:5d:
3c:a1:0a:14:f3:af:5e:23:68:91:e2:89:e5:28:bf:
f3:12:eb:8e:6a:7d:12:48:fa:28:4f:7f:ff:c3:1c:
e5:80:94:4b:ce:b1:a4:b2:39:e5:13:37:cb:04:89:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:77:8C:DC:49:90:55:D8:B8:78:E7:91:AE:D0:A5:0D:5B:53:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2caa4591-ff02-36bf-a82a-f91399c38ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:57:03:7f:62:3d:7f:8c:76:34:f6:b6:50:01:0a:44:af:89:
af:9f:d8:46:ba:6d:a2:22:0f:eb:32:a6:b5:4e:91:67:f8:e6:
d2:06:60:e9:bf:2c:23:a6:ad:9b:62:a6:3b:49:aa:f2:b5:aa:
37:13:1f:0a:2c:2b:53:19:4b:f9:57:0f:a6:d1:ea:5d:3f:b6:
e0:d9:b1:30:d5:6d:81:5d:9e:5b:eb:b2:fd:a2:a3:32:9e:f6:
bd:49:60:fb:dd:03:f2:81:28:f6:be:8f:ac:91:36:ca:24:3a:
b6:78:ac:fc:e5:d0:dc:3c:c1:2a:21:74:3b:3c:30:cb:33:46:
6f:90:59:df:42:db:9f:f0:a8:0d:e9:55:e1:e9:59:02:9d:42:
42:73:16:0c:8e:10:d6:91:04:68:23:cc:69:a6:23:ed:d9:2e:
4a:bb:91:6b:e7:fa:a5:ab:09:5e:e8:36:dc:ff:46:3f:cb:41:
cb:df:b5:28:b1:76:cf:c2:f1:30:46:24:8a:7a:a0:0b:de:f7:
12:3f:ba:ea:a0:f4:f1:3a:37:32:5a:1c:3f:31:43:c4:71:91:
b5:56:71:2c:5f:c5:36:c6:53:b3:8e:db:89:50:03:d4:83:da:
cd:73:f6:3c:90:c9:6d:d5:8f:9c:47:4e:b8:2f:09:c2:9e:8d:
b2:61:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:29 2026 by rpki-client