
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fe798c5-11a0-3b3a-bc91-564763444b29.roa
File: 5fe798c5-11a0-3b3a-bc91-564763444b29.roa (raw, json)
Hash identifier: kJ0xqBKasHTgHIqXyqeUg59ioaQ45xE5CzpIfo2PkYo=
Subject key identifier: DC:9E:97:D4:19:76:61:37:28:50:21:36:75:4A:C5:09:48:5E:7B:27
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D83CAEC5797427AEC07A81860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fe798c5-11a0-3b3a-bc91-564763444b29.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 397197
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:ec:57:97:42:7a:ec:07:a8:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=acb5dcbb-0f4d-46ab-8332-4be265b2a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:8b:de:18:d5:0f:9d:92:0b:16:2d:60:77:
1f:81:48:85:ff:60:03:bd:90:a3:2d:06:d7:c9:ba:
2a:8f:e7:9a:42:0d:66:07:90:b5:ea:b7:78:59:e3:
5a:2f:25:7b:03:6c:3d:2f:ba:0e:4b:b0:fb:fc:44:
df:2e:29:68:aa:fb:a8:79:21:14:bf:b8:d8:44:0c:
68:5f:fc:fd:27:3e:49:d0:59:91:44:ae:2a:38:8a:
bb:bf:b2:05:09:6b:3e:ca:c3:e7:d4:7b:f2:82:3d:
36:f6:ef:33:3d:95:d3:3d:15:35:f3:b4:99:2c:0e:
11:6f:e0:05:03:2f:a9:6f:57:55:b4:c8:8a:06:8a:
81:22:24:79:53:ef:61:48:9b:35:45:02:a6:58:e4:
a9:0a:1c:d6:ff:1c:2e:d8:b9:ca:56:ff:d7:40:54:
3f:5c:91:ac:c5:ab:5b:f7:fa:6e:60:9f:e1:57:03:
dd:6c:6a:98:94:aa:cd:4d:c8:dd:a6:30:f0:db:ee:
e2:19:62:b8:1a:b0:82:e8:62:6c:ff:49:55:66:67:
11:fb:6a:45:f6:8d:bd:61:ca:24:28:7a:be:45:be:
10:70:19:c7:ac:3b:00:48:3f:0d:3f:05:d4:61:3e:
69:6e:8d:7c:b9:ba:95:ec:e8:b4:54:b5:4f:8b:1c:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:97:D4:19:76:61:37:28:50:21:36:75:4A:C5:09:48:5E:7B:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fe798c5-11a0-3b3a-bc91-564763444b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f7:10:4a:e7:d9:de:3c:2d:dd:a0:12:3a:26:68:51:7b:84:
f5:3c:07:67:e0:26:af:0c:79:05:54:d9:b8:61:ac:e7:4e:56:
01:44:5e:8c:43:89:ff:e1:5a:dd:aa:93:ad:3f:ed:9e:f5:26:
7e:f1:e0:82:97:1d:2b:d9:7d:43:34:9d:bf:ed:af:ad:4a:7e:
cb:e2:46:ec:22:cb:32:e1:c6:4f:31:bd:ba:44:3d:8b:4a:de:
87:a1:f7:e3:f6:29:1a:46:1f:b7:07:ab:0b:fb:af:60:dd:21:
8d:6d:07:fe:c4:45:4d:07:ae:3c:41:a1:b5:98:bc:7b:db:76:
33:63:de:df:8f:86:45:98:3b:93:48:e2:b7:15:b5:06:36:9f:
df:19:bf:6a:62:cd:72:00:f7:d9:ff:98:e7:21:56:ce:2d:51:
4d:b7:66:80:3f:63:d4:09:8a:91:bf:e9:a9:12:65:e4:ac:9c:
8d:98:d3:81:d4:b5:75:11:2c:59:e9:ca:65:71:4a:77:fe:7b:
7c:06:03:11:dd:cc:5d:25:e3:8f:16:f9:d0:dc:a0:4a:f5:5a:
5d:02:49:c3:8a:dc:aa:23:5f:83:6a:aa:85:47:51:69:03:0d:
45:25:b4:25:36:a0:47:1f:51:3c:5a:94:24:76:02:7b:2d:72:
b0:eb:eb:6f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyuxXl0J67AeoGGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YWNiNWRjYmItMGY0ZC00NmFiLTgzMzItNGJlMjY1YjJhNmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+KL3hjVD52SCxYtYHcfgUiF/2ADvZCjLQbX
yboqj+eaQg1mB5C16rd4WeNaLyV7A2w9L7oOS7D7/ETfLiloqvuoeSEUv7jYRAxo
X/z9Jz5J0FmRRK4qOIq7v7IFCWs+ysPn1Hvygj029u8zPZXTPRU187SZLA4Rb+AF
Ay+pb1dVtMiKBoqBIiR5U+9hSJs1RQKmWOSpChzW/xwu2LnKVv/XQFQ/XJGsxatb
9/puYJ/hVwPdbGqYlKrNTcjdpjDw2+7iGWK4GrCC6GJs/0lVZmcR+2pF9o29Ycok
KHq+Rb4QcBnHrDsASD8NPwXUYT5pbo18ubqV7Oi0VLVPixyoWwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNyel9QZdmE3KFAhNnVKxQlIXnsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWZlNzk4YzUtMTFhMC0z
YjNhLWJjOTEtNTY0NzYzNDQ0YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBJ9xBK59nePC3doBI6JmhRe4T1PAdn4CavDHkF
VNm4YaznTlYBRF6MQ4n/4VrdqpOtP+2e9SZ+8eCClx0r2X1DNJ2/7a+tSn7L4kbs
Issy4cZPMb26RD2LSt6Hoffj9ikaRh+3B6sL+69g3SGNbQf+xEVNB648QaG1mLx7
23YzY97fj4ZFmDuTSOK3FbUGNp/fGb9qYs1yAPfZ/5jnIVbOLVFNt2aAP2PUCYqR
v+mpEmXkrJyNmNOB1LV1ESxZ6cplcUp3/nt8BgMR3cxdJeOPFvnQ3KBK9VpdAknD
ityqI1+DaqqFR1FpAw1FJbQlNqBHH1E8WpQkdgJ7LXKw6+tv
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:29 2026 by rpki-client