
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5fa53a-b8b1-33a8-b7d2-ee3fee603819.roa
File: 8b5fa53a-b8b1-33a8-b7d2-ee3fee603819.roa (raw, json)
Hash identifier: jfWZ5BzItxu6Uo3SLkeWncdRNoFLwpAvwL6/yB/XnYA=
Subject key identifier: 71:2F:77:BD:31:B7:3C:99:CE:B1:FF:C9:D4:3C:45:F9:36:AC:11:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D81285B809257C450CD7DF400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5fa53a-b8b1-33a8-b7d2-ee3fee603819.roa
Signing time: Tue 14 Apr 2026 14:22:10 +0000
ROA not before: Tue 14 Apr 2026 14:22:10 +0000
ROA not after: Mon 13 Jul 2026 14:22:10 +0000
asID: 396614
IP address blocks: 2001:500:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:5b:80:92:57:c4:50:cd:7d:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:10 2026 GMT
Not After : Jul 13 14:22:10 2026 GMT
Subject: CN=951b99e0-8ded-4581-97ac-3c0d31f748d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:9d:a7:91:35:1c:28:0d:37:f0:ca:40:a5:
bd:d4:07:98:8e:e4:6a:ed:bd:8b:d4:4a:1c:46:cd:
d0:8d:88:f8:f4:6e:1b:22:a8:4b:c9:66:54:c9:11:
bc:db:15:6d:27:43:84:48:65:1a:9a:02:c6:08:45:
cf:46:f0:85:4f:fc:ab:9a:99:b6:16:fc:33:cd:f6:
59:48:4b:20:ad:d9:f1:21:13:21:54:2b:df:55:65:
c9:3b:2e:7c:36:16:57:cc:85:ab:4d:e3:34:54:db:
3d:3e:d4:ca:ee:5c:19:66:b4:1b:ab:70:6e:c2:ca:
7a:29:b3:5c:1e:a9:20:12:5f:55:9b:96:1a:82:22:
60:0e:1c:4c:0e:15:3b:de:b4:19:6c:b8:94:91:8a:
b0:b2:8b:d7:23:0a:f3:53:c5:8c:b6:21:3c:17:fe:
f3:0a:4c:3a:2d:57:6d:fa:ac:7e:ac:2f:7b:3f:d4:
c9:3a:b4:a7:4a:63:c5:0e:68:06:a0:e5:42:a3:80:
4f:49:0e:6f:19:11:57:5e:1d:20:0f:a7:84:59:91:
d3:52:ed:d3:66:12:73:dd:65:9c:25:51:db:1f:29:
1d:16:15:e9:29:0d:99:06:f6:2a:3c:30:ef:77:7d:
f4:8d:37:29:eb:2d:e5:1c:ba:63:68:18:5c:c5:80:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:77:BD:31:B7:3C:99:CE:B1:FF:C9:D4:3C:45:F9:36:AC:11:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b5fa53a-b8b1-33a8-b7d2-ee3fee603819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:84:fc:11:00:b6:1f:d6:f7:a5:69:eb:aa:40:78:fe:93:4a:
18:2c:4e:1d:2f:c8:95:68:4b:ef:e0:bb:af:8c:ff:40:1f:09:
47:44:76:a2:84:2c:62:cf:1f:dd:93:4b:63:d7:c6:61:c7:88:
b6:a5:14:72:38:64:cb:12:0d:a9:b2:5f:f8:25:6a:b3:b4:b1:
7f:98:3d:1c:6a:23:ba:f1:db:42:8e:0b:55:4a:2a:86:8f:54:
0e:2b:ee:1e:e7:74:bd:f1:a3:d9:cf:23:d6:c3:27:e0:66:21:
74:d8:79:39:f2:10:cf:f0:aa:8f:ee:39:bd:73:41:9b:79:f5:
b3:cd:44:d9:df:f2:6e:91:84:50:99:33:71:18:22:33:e2:38:
c0:d0:80:3d:34:fa:a2:62:48:38:f1:cd:69:6d:6d:9f:9d:84:
a9:98:c6:53:39:48:d5:c9:18:80:1f:f6:d2:40:bf:c7:ef:60:
51:b4:99:f7:d5:4c:f6:d3:2d:d3:06:72:eb:56:ec:a4:2c:93:
c7:65:04:70:7e:60:2a:99:cb:dc:a0:5b:0c:20:a3:1d:68:20:
79:8f:71:8e:87:70:ea:e7:d7:5d:20:4f:5c:2f:52:27:37:3e:
c6:10:e8:fa:b8:8a:50:b7:bb:6b:cd:7e:c1:bb:0f:3b:b4:a8:
5d:31:6e:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BKFuAklfEUM199AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIxMFoXDTI2MDcxMzE0MjIxMFowLzEtMCsGA1UEAxMk
OTUxYjk5ZTAtOGRlZC00NTgxLTk3YWMtM2MwZDMxZjc0OGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi42dp5E1HCgNN/DKQKW91AeYjuRq7b2L1Eoc
Rs3QjYj49G4bIqhLyWZUyRG82xVtJ0OESGUamgLGCEXPRvCFT/yrmpm2FvwzzfZZ
SEsgrdnxIRMhVCvfVWXJOy58NhZXzIWrTeM0VNs9PtTK7lwZZrQbq3Buwsp6KbNc
HqkgEl9Vm5YagiJgDhxMDhU73rQZbLiUkYqwsovXIwrzU8WMtiE8F/7zCkw6LVdt
+qx+rC97P9TJOrSnSmPFDmgGoOVCo4BPSQ5vGRFXXh0gD6eEWZHTUu3TZhJz3WWc
JVHbHykdFhXpKQ2ZBvYqPDDvd330jTcp6y3lHLpjaBhcxYCLNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHEvd70xtzyZzrH/ydQ8Rfk2rBHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI1ZmE1M2EtYjhiMS0z
M2E4LWI3ZDItZWUzZmVlNjAzODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAASE/BEAth/W96Vp66pAeP6TShgsTh0vyJVoS+/gu6+M/0AfCUdE
dqKELGLPH92TS2PXxmHHiLalFHI4ZMsSDamyX/glarO0sX+YPRxqI7rx20KOC1VK
KoaPVA4r7h7ndL3xo9nPI9bDJ+BmIXTYeTnyEM/wqo/uOb1zQZt59bPNRNnf8m6R
hFCZM3EYIjPiOMDQgD00+qJiSDjxzWltbZ+dhKmYxlM5SNXJGIAf9tJAv8fvYFG0
mffVTPbTLdMGcutW7KQsk8dlBHB+YCqZy9ygWwwgox1oIHmPcY6HcOrn110gT1wv
Uic3PsYQ6Pq4ilC3u2vNfsG7Dzu0qF0xbpQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:11 2026 by rpki-client