
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e060f8f-7c69-3a18-b28b-4d3c46f84134.roa
File: 2e060f8f-7c69-3a18-b28b-4d3c46f84134.roa (raw, json)
Hash identifier: jjNIJuvHb3VC+X4/t2luTsQMdsb9KUj62w/5/evXpdU=
Subject key identifier: FF:AC:14:4F:4B:69:12:39:A0:0C:25:1D:0D:8B:D5:DC:5A:AE:0F:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D59EAB46FED04ADB1F2E1A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e060f8f-7c69-3a18-b28b-4d3c46f84134.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 396567
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:b4:6f:ed:04:ad:b1:f2:e1:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=42c43708-b0ef-4986-8afe-26b4fdcf5860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:d2:11:42:6a:13:e6:7f:82:5f:92:5a:c6:
17:83:a8:72:03:14:94:78:3d:5b:b3:6e:12:96:47:
6f:ac:d6:03:49:15:c6:6a:8e:ea:2b:f3:aa:6c:d0:
32:b5:53:8c:32:65:ff:ce:1c:6c:27:91:96:a6:61:
d3:36:b9:a1:27:c6:83:55:1d:c0:be:4f:80:91:95:
28:0a:25:43:31:bd:fd:f9:38:42:b0:02:1f:42:04:
a4:ac:0e:e9:fb:5b:a9:2f:63:c3:00:c8:88:e6:6f:
58:d8:d8:0f:5b:d4:db:1a:e6:f0:63:67:72:e3:fe:
18:00:39:29:28:09:3b:1b:9e:9a:d8:e0:46:21:e3:
13:cb:74:70:8d:ee:77:b8:9d:07:ee:c9:a6:4e:7c:
65:8f:34:91:78:69:3e:2d:13:5f:bd:6b:c9:d1:73:
80:23:85:d6:62:a6:da:62:07:c3:16:80:8c:14:9b:
83:00:2f:1c:37:9a:ab:54:2d:6a:29:aa:8c:c7:0d:
e9:af:c8:d2:b3:67:07:b5:64:be:a1:44:2a:f5:fb:
00:9a:16:f1:a8:66:34:68:64:e6:42:78:93:47:db:
88:1d:82:ae:87:09:4a:65:97:1a:e3:81:c4:0a:f5:
c2:d6:17:0b:40:eb:e3:aa:32:9d:55:c1:33:95:73:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:14:4F:4B:69:12:39:A0:0C:25:1D:0D:8B:D5:DC:5A:AE:0F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e060f8f-7c69-3a18-b28b-4d3c46f84134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a5:18:1b:7d:bb:6f:38:4e:56:72:51:4e:fe:77:60:57:84:
ca:f5:a9:75:9d:56:d7:58:93:ae:da:31:53:dc:fe:7f:d3:01:
38:d0:27:11:77:76:d7:36:44:fd:8f:70:48:71:0d:0a:ca:d7:
ee:9d:21:1e:c6:f9:ec:7d:d1:85:b3:1b:9e:3a:9f:a7:83:4e:
13:bf:81:e8:fe:6c:dc:a7:d3:c8:4f:ee:92:3c:e3:bc:3c:f7:
a6:b1:20:9d:0d:0b:58:a6:a7:1f:03:67:bd:3a:4d:a8:15:e9:
c4:97:ca:14:02:a5:33:b0:45:54:86:4e:2a:77:5e:ed:b7:12:
1e:1a:22:da:e3:05:9f:16:cf:e6:7a:db:d3:6a:e4:98:d6:af:
27:df:98:74:b2:b8:55:33:bb:b6:eb:32:ca:16:c9:dc:93:6e:
52:8f:6c:b1:d1:c7:f5:de:bd:fa:47:04:86:a3:f0:8d:64:9f:
da:1e:c1:96:69:ec:db:63:29:bc:8f:14:84:b7:36:71:77:08:
c9:6e:04:13:12:03:92:46:cc:3d:11:3a:cf:f5:87:85:f8:1c:
2e:e2:94:04:48:66:c8:4d:05:5b:43:89:09:f0:06:cf:02:1b:
65:97:de:2a:f2:40:27:4d:9c:86:d7:44:8a:a8:fa:74:09:f0:
0c:d1:42:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rRv7QStsfLhoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NDJjNDM3MDgtYjBlZi00OTg2LThhZmUtMjZiNGZkY2Y1ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt7SEUJqE+Z/gl+SWsYXg6hyAxSUeD1bs24S
lkdvrNYDSRXGao7qK/OqbNAytVOMMmX/zhxsJ5GWpmHTNrmhJ8aDVR3Avk+AkZUo
CiVDMb39+ThCsAIfQgSkrA7p+1upL2PDAMiI5m9Y2NgPW9TbGubwY2dy4/4YADkp
KAk7G56a2OBGIeMTy3Rwje53uJ0H7smmTnxljzSReGk+LRNfvWvJ0XOAI4XWYqba
YgfDFoCMFJuDAC8cN5qrVC1qKaqMxw3pr8jSs2cHtWS+oUQq9fsAmhbxqGY0aGTm
QniTR9uIHYKuhwlKZZca44HECvXC1hcLQOvjqjKdVcEzlXOBgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP+sFE9LaRI5oAwlHQ2L1dxarg9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmUwNjBmOGYtN2M2OS0z
YTE4LWIyOGItNGQzYzQ2Zjg0MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGilGBt9u284TlZyUU7+d2BXhMr1qXWdVtdYk67aMVPc/n/TATjQ
JxF3dtc2RP2PcEhxDQrK1+6dIR7G+ex90YWzG546n6eDThO/gej+bNyn08hP7pI8
47w896axIJ0NC1impx8DZ706TagV6cSXyhQCpTOwRVSGTip3Xu23Eh4aItrjBZ8W
z+Z629Nq5JjWryffmHSyuFUzu7brMsoWydyTblKPbLHRx/XevfpHBIaj8I1kn9oe
wZZp7NtjKbyPFIS3NnF3CMluBBMSA5JGzD0ROs/1h4X4HC7ilARIZshNBVtDiQnw
Bs8CG2WX3iryQCdNnIbXRIqo+nQJ8AzRQjg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:53 2026 by rpki-client