
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/539301f2-6acd-32b4-a058-b2d19bf4a4a3.roa
File: 539301f2-6acd-32b4-a058-b2d19bf4a4a3.roa (raw, json)
Hash identifier: XdxBwOjFb6a19OGEV7ZpKsot1kL33n0pdzXtw9nD66Y=
Subject key identifier: 51:2A:1B:B1:08:EE:4E:08:7E:11:52:8B:D4:EA:57:EE:09:16:2B:8B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E0006341A3EA4CD96CAB62C20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/539301f2-6acd-32b4-a058-b2d19bf4a4a3.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396611
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:34:1a:3e:a4:cd:96:ca:b6:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=98aa88a2-cade-4d79-a61e-23bead2dc717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:70:ad:fe:13:a2:1e:9a:e4:f4:44:47:5c:
18:04:3a:02:88:73:27:e7:84:9e:13:4d:c1:17:97:
7d:91:3e:4e:56:07:70:30:2e:09:d3:1d:3f:25:b9:
57:fd:93:94:12:53:92:48:fa:60:94:45:ff:b0:8a:
b4:86:7e:8b:b4:69:42:ef:d5:4a:59:a2:1e:46:b5:
64:d0:0b:d3:0f:5d:a6:a1:c9:6d:a7:dd:21:0f:31:
5c:27:08:bc:ec:17:71:bb:7d:7f:70:12:35:ca:4c:
bb:b1:92:ce:54:8c:55:c6:a2:f7:c3:05:4c:9e:f9:
0d:05:c6:93:5a:c1:d3:d5:d3:f7:6e:ce:a9:1c:3e:
5c:d6:03:38:4a:ab:ce:ac:1e:3a:ff:28:46:6d:f7:
b5:07:ac:47:73:0d:24:16:98:f5:74:18:3d:ca:64:
cf:b2:81:05:80:74:fa:a3:51:3c:87:5a:13:76:60:
8f:20:80:9a:96:69:d4:07:ad:a0:06:54:91:78:2f:
e0:1e:df:52:4c:49:a7:9e:08:f4:71:2c:cb:ab:d5:
73:96:75:4f:79:0d:81:7d:ac:6c:57:07:a4:0b:75:
98:98:e3:19:f8:af:fc:ff:fc:7b:c1:77:af:09:87:
82:ae:ad:94:85:1c:f4:f1:4a:bf:8f:ae:d8:88:1e:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:1B:B1:08:EE:4E:08:7E:11:52:8B:D4:EA:57:EE:09:16:2B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/539301f2-6acd-32b4-a058-b2d19bf4a4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f1:80:4b:3a:ce:86:e0:d0:18:a7:5d:67:f6:0c:fc:89:c3:
ef:ce:f0:50:35:2f:99:d4:57:51:02:6b:cd:d6:77:8b:81:28:
69:70:3f:a4:df:42:15:92:d7:6a:e9:03:06:9a:ff:60:b9:be:
ca:73:46:62:5a:3a:49:03:a0:bb:29:84:59:b9:44:57:c5:41:
e6:e8:0b:d2:fd:c9:ba:7d:4f:97:6b:3c:90:f2:b6:68:30:62:
84:72:4b:ab:fb:70:e7:d5:87:96:70:14:32:d7:a4:7b:7e:a5:
eb:03:e0:b1:91:fd:2f:93:1d:fb:e9:db:bd:c4:c3:ef:fb:9a:
3f:61:b2:ca:d8:c4:c3:ef:2e:ec:1f:a4:fd:4a:5e:02:2a:78:
90:41:2a:9c:d8:64:7e:97:e3:a4:f7:e2:a9:d4:8f:36:15:de:
4f:70:67:36:87:e2:fc:cb:e4:58:ec:37:cc:2f:f1:bc:9e:e9:
b1:14:c8:0e:50:2b:79:9a:4a:34:b1:5f:3f:6c:a4:d1:7a:c6:
52:cb:b5:93:ba:0a:71:cc:21:a2:96:01:c5:6f:4d:83:e1:fe:
43:dc:e5:25:cf:a2:30:16:61:f3:ba:c1:e5:f0:fb:26:5b:b8:
5d:d0:e4:b8:8d:4f:f1:42:40:4d:e1:b0:e1:09:5d:c7:8b:ac:
a2:3d:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:07 2026 by rpki-client