
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a4c70d0-194b-344c-b79f-b1d0aa3d38f2.roa
File: 5a4c70d0-194b-344c-b79f-b1d0aa3d38f2.roa (raw, json)
Hash identifier: nPqX410eoIGmGiv+qB6pLo57PtltU7bgbTIGGDVmduA=
Subject key identifier: D5:67:D6:B1:3E:45:89:1E:15:DD:34:BA:E3:12:94:82:37:97:13:62
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D732BD4D9A75BF3AC9F489AA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a4c70d0-194b-344c-b79f-b1d0aa3d38f2.roa
Signing time: Thu 09 Apr 2026 14:07:51 +0000
ROA not before: Thu 09 Apr 2026 14:07:51 +0000
ROA not after: Wed 08 Jul 2026 14:07:51 +0000
asID: 396560
IP address blocks: 2001:500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:2b:d4:d9:a7:5b:f3:ac:9f:48:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 9 14:07:51 2026 GMT
Not After : Jul 8 14:07:51 2026 GMT
Subject: CN=613185cf-0aef-43ea-914d-91afa548d7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:f1:49:9b:79:7c:c1:21:e1:19:e7:c6:53:
12:52:23:7f:c1:20:2f:2e:74:f7:52:bb:df:9a:65:
08:7a:1f:3c:fb:a1:e0:da:1b:5c:2f:4e:99:06:a4:
11:84:95:c8:42:c6:20:ca:d1:3e:cc:b7:23:52:78:
7b:d6:6b:11:4b:34:7a:5a:83:a4:7d:f5:85:c9:62:
62:94:b7:e4:5f:6e:c5:5c:5a:a6:41:ef:3e:2a:77:
02:af:06:36:53:a7:e2:49:66:0d:f6:a8:b5:76:d3:
ae:d5:a4:8d:c8:d4:c1:69:22:46:09:21:fc:8b:db:
2a:45:28:d2:a2:d5:c0:da:09:95:09:bf:42:5c:e9:
b9:0f:63:32:24:5e:14:39:1f:25:71:59:46:a7:0d:
39:ed:ea:50:22:6a:a0:59:d0:61:02:96:ee:05:1d:
23:de:fb:46:66:e7:48:f5:d7:85:e5:88:35:73:c6:
fe:08:6a:36:fb:85:1a:3d:95:6c:1a:72:c3:34:d4:
c9:2b:c9:dd:83:c4:fd:c8:12:f1:08:d8:cd:66:7b:
e5:e7:9e:fb:f4:a0:34:70:e7:29:65:a1:37:a6:45:
85:3b:97:ce:cd:b8:cc:cb:6a:99:d3:ed:c6:55:9e:
b0:61:59:d1:94:90:b8:dd:c9:21:d7:38:49:c3:d8:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:D6:B1:3E:45:89:1E:15:DD:34:BA:E3:12:94:82:37:97:13:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a4c70d0-194b-344c-b79f-b1d0aa3d38f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:29:4c:a8:75:1c:28:1f:0a:e7:68:6a:ca:f2:0a:9d:c9:32:
28:1d:c4:ff:22:88:28:41:a9:19:93:ef:cc:09:09:3a:8a:5b:
45:07:b7:e2:cb:a9:a8:44:d0:d6:f6:02:e5:2a:33:f7:6e:c2:
8e:bf:d4:bd:70:ca:dd:9f:96:70:cb:da:51:47:1b:a1:a3:8a:
57:db:7d:0c:1d:25:41:22:f9:81:92:a3:15:a9:26:e8:46:4a:
0e:1e:74:8f:61:47:79:0f:46:cf:57:46:4d:4a:ad:48:e5:ad:
ae:5d:62:98:19:65:13:81:bd:3a:c7:4e:93:55:f7:71:a2:fb:
6d:c4:99:7c:4f:47:78:d1:de:c2:ca:f4:50:49:69:20:12:53:
c0:2a:02:69:9b:55:36:7e:6a:32:b3:b6:ee:01:7a:47:9e:8d:
2d:f4:07:99:aa:f8:33:6d:8c:8b:ab:5d:99:34:a4:30:17:87:
76:3f:b2:b1:fb:12:15:38:b4:03:bd:c7:35:ae:a9:c3:74:33:
cd:63:8a:41:7e:16:4a:6f:10:99:df:87:d4:fc:81:06:59:14:
69:82:b0:15:48:e1:15:cf:97:72:9e:1a:4d:80:20:68:d4:b6:
98:5e:1f:31:f9:ab:f9:27:c6:a0:2c:2d:b0:1d:ac:17:36:52:
c0:79:ab:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9TZp1vzrJ9ImqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1MVoXDTI2MDcwODE0MDc1MVowLzEtMCsGA1UEAxMk
NjEzMTg1Y2YtMGFlZi00M2VhLTkxNGQtOTFhZmE1NDhkN2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA3xSZt5fMEh4RnnxlMSUiN/wSAvLnT3Urvf
mmUIeh88+6Hg2htcL06ZBqQRhJXIQsYgytE+zLcjUnh71msRSzR6WoOkffWFyWJi
lLfkX27FXFqmQe8+KncCrwY2U6fiSWYN9qi1dtOu1aSNyNTBaSJGCSH8i9sqRSjS
otXA2gmVCb9CXOm5D2MyJF4UOR8lcVlGpw057epQImqgWdBhApbuBR0j3vtGZudI
9deF5Yg1c8b+CGo2+4UaPZVsGnLDNNTJK8ndg8T9yBLxCNjNZnvl55779KA0cOcp
ZaE3pkWFO5fOzbjMy2qZ0+3GVZ6wYVnRlJC43ckh1zhJw9hrRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNVn1rE+RYkeFd00uuMSlII3lxNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWE0YzcwZDAtMTk0Yi0z
NDRjLWI3OWYtYjFkMGFhM2QzOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGspTKh1HCgfCudoasryCp3JMigdxP8iiChBqRmT78wJCTqKW0UH
t+LLqahE0Nb2AuUqM/duwo6/1L1wyt2flnDL2lFHG6GjilfbfQwdJUEi+YGSoxWp
JuhGSg4edI9hR3kPRs9XRk1KrUjlra5dYpgZZROBvTrHTpNV93Gi+23EmXxPR3jR
3sLK9FBJaSASU8AqAmmbVTZ+ajKztu4BekeejS30B5mq+DNtjIurXZk0pDAXh3Y/
srH7EhU4tAO9xzWuqcN0M81jikF+FkpvEJnfh9T8gQZZFGmCsBVI4RXPl3KeGk2A
IGjUtpheHzH5q/knxqAsLbAdrBc2UsB5q0I=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:14 2026 by rpki-client