
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
File: 9f9e87a5-daf1-38e1-9600-8596d3062364.roa (raw, json)
Hash identifier: Lr9kb05cJtwq4E+m+1DczbMolsu0ylQI4pS7g3+VjFk=
Subject key identifier: 54:F9:23:FC:68:47:93:4F:DC:47:9B:60:CD:5C:B2:CD:1E:18:FF:21
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E00060900DC79898AE876B3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396597
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:09:00:dc:79:89:8a:e8:76:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=a50bc672-0919-4e6b-9be6-3824771718af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:5b:16:a2:3e:94:21:93:1e:00:8e:8e:30:
72:fa:45:35:18:54:ab:a1:c1:65:8f:41:67:43:1e:
30:78:15:c5:01:b4:5e:8b:d0:32:d8:d6:1e:a5:91:
1c:4c:38:94:f0:67:d8:02:19:c5:8b:74:61:f7:f0:
c7:da:d8:7e:08:33:f9:f1:32:22:e8:fe:c3:e8:a1:
d2:9c:9d:a1:78:15:48:fa:a0:41:ee:09:52:b0:85:
55:eb:65:6a:0d:17:24:e3:3d:56:78:9a:a4:d9:1e:
70:4e:3f:55:51:c4:f1:33:dd:b1:11:8d:51:8e:6a:
af:99:8d:23:df:bd:c0:bb:1b:83:0b:b7:ac:94:5f:
9e:56:e8:58:12:00:35:dc:ff:d3:7c:60:2d:a7:3f:
09:b1:82:36:c4:16:8d:d3:88:93:e2:86:da:9e:c1:
a2:bf:b5:bd:3d:5b:e6:5e:81:cb:be:5d:6b:09:a7:
60:68:0f:d1:ee:da:96:93:4c:60:44:c5:cd:15:42:
e2:e6:e0:ac:bd:24:b8:f3:8b:4d:15:49:50:bb:8d:
6f:10:08:21:fa:b0:3e:2f:4b:f2:f8:ff:9a:ed:38:
23:70:96:54:5c:60:47:e8:9f:2c:3d:de:85:e3:80:
9d:70:ba:bc:5f:2e:b8:5d:d6:01:29:99:7e:94:5c:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:23:FC:68:47:93:4F:DC:47:9B:60:CD:5C:B2:CD:1E:18:FF:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:42:80:d3:83:9b:2d:12:4e:8c:c3:82:13:67:76:8d:17:b9:
74:a5:33:a4:6f:7c:27:03:28:50:6c:35:4f:0a:c7:d5:30:f9:
4a:a3:3b:2f:25:da:a0:19:0d:60:1e:b7:97:92:ed:19:e9:c1:
f7:a2:83:ad:88:f1:f8:2d:20:be:8c:89:61:9d:4b:da:54:ac:
6c:9b:f8:9b:11:1e:ee:80:2d:26:6c:4b:20:02:41:5e:76:05:
9b:14:4b:f7:6c:ea:bb:86:17:6f:06:11:48:b5:81:f6:d3:85:
ae:53:0b:9b:42:e9:96:99:d6:10:a1:2e:ad:e9:51:e0:ad:b6:
35:43:41:6b:4f:c1:7c:8d:58:54:91:67:fb:3d:be:ca:ff:ac:
e1:ef:a0:e1:26:90:34:eb:26:1d:8a:c1:73:62:9e:3c:ec:2c:
3a:0d:5c:27:35:7a:cc:19:1b:b0:6f:6d:62:03:b9:8e:88:fc:
b4:c2:f1:f3:e2:25:da:15:a2:72:65:f4:75:6b:00:6b:7c:a9:
51:4d:f3:68:ef:1d:8f:60:02:64:94:99:d4:8e:82:6b:7b:e0:
db:c6:19:73:69:cf:66:c9:1f:b9:1d:44:d4:94:42:47:4f:ee:
be:67:ce:62:d2:19:4e:37:4f:8e:4a:f1:64:cb:e8:ef:42:7a:
f7:38:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:52 2026 by rpki-client