
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
File: 407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa (raw, json)
Hash identifier: xX+hRH5fPdYsuFPwc30zkImjtaGtElwLooEhfjFNCMw=
Subject key identifier: 9C:0C:32:EC:E0:3F:0F:96:E7:3E:03:5F:FB:7A:8E:5A:F0:B1:96:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D86956AB879C4DAA774CC2A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 396600
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:6a:b8:79:c4:da:a7:74:cc:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=268e883d-9c26-4452-b67f-a07c7b76acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:11:ea:7f:c2:48:49:3d:00:9b:68:fe:56:
fc:e2:ef:5f:a6:e0:b7:66:df:57:87:37:a0:4f:11:
4d:28:da:38:3c:ce:b1:f5:54:d1:2c:02:6a:8b:ed:
15:ab:4b:05:4e:35:fa:5b:8d:45:7b:28:6c:37:b7:
d0:e5:83:62:bf:bc:88:8d:e0:fe:64:71:b8:7e:46:
00:81:ff:04:27:3e:a0:e1:33:9e:55:56:74:3c:88:
28:52:db:74:c6:61:6f:af:9f:e0:a2:da:79:e1:b7:
13:6f:f4:bb:c8:14:0d:03:c1:72:a1:a4:6c:1a:c4:
2d:f6:52:91:b9:e5:d1:df:be:2a:0e:d4:5e:73:d5:
aa:75:70:29:8f:93:19:ab:12:5a:ba:f9:93:29:d3:
32:1c:e9:f4:72:ca:5d:0b:49:e8:01:ae:b4:6e:70:
48:9b:a4:69:e4:5d:f9:44:4d:dd:a5:08:89:9d:76:
cf:46:7e:df:45:7f:43:6d:79:fb:74:09:69:e9:7b:
b8:56:ac:53:69:06:97:2c:04:80:a5:2c:eb:22:3f:
7d:74:80:4a:57:8b:d2:a9:86:4d:a0:82:64:77:18:
75:2f:f2:72:66:bf:e9:0c:36:1b:d4:10:45:3c:44:
c6:6e:e1:dd:8a:b1:67:3c:ee:4b:37:43:68:84:d4:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:32:EC:E0:3F:0F:96:E7:3E:03:5F:FB:7A:8E:5A:F0:B1:96:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ed:a2:4d:03:2c:33:d2:3a:da:1f:e7:c1:6c:65:3c:e0:c1:
3f:a0:8b:f7:64:b6:d6:d8:28:67:74:7e:3f:f8:6f:fd:52:9e:
bd:c3:11:11:ac:87:3b:92:1c:c2:75:e9:29:c0:8b:ad:5b:f5:
f1:a9:20:c6:d4:c5:b2:79:a6:96:1b:11:d0:c1:74:04:4a:2f:
1c:cc:e4:40:56:aa:c4:61:20:ff:83:10:ef:bb:b3:53:ab:03:
47:23:e7:84:e9:57:1a:a5:cc:5c:93:13:de:0b:e6:f5:2d:40:
ff:ba:8b:a8:c0:0b:5a:35:c5:90:44:49:1d:bc:bc:98:5f:e9:
8b:ee:6f:18:b5:94:9b:92:92:e8:f4:4c:58:4a:2f:2a:07:2d:
c1:19:58:51:a6:87:cb:9b:ab:fa:6e:b7:cd:bd:fb:88:4b:67:
71:38:73:55:cf:17:ec:b0:a5:17:b3:01:07:8b:35:06:a8:80:
27:7f:55:8d:7a:f4:db:35:6c:ad:d5:b1:4f:c2:fa:ef:aa:b3:
db:dc:d5:8b:72:e6:47:82:cb:86:56:e0:e9:c7:5e:10:65:3c:
dd:71:a9:2b:92:4c:4d:4d:96:97:ea:9d:1f:8d:d4:3f:1f:e5:
ca:28:9c:c3:d1:9a:36:f4:9a:82:8a:9a:0d:95:60:18:bd:60:
5f:1a:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:28 2026 by rpki-client