
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
File: baa3bdde-11fd-3f3c-b057-d89d19787b73.roa (raw, json)
Hash identifier: HXZEicxFY3khsZO0OR6LDpcQvVM7LeiBLhxrYl6ZAJg=
Subject key identifier: BA:13:2C:65:77:DA:A3:D6:1B:DE:EE:78:10:04:BD:43:5E:4B:2D:7A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E0006065F9B66025BFE541E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396555
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:06:5f:9b:66:02:5b:fe:54:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=e7a7055d-a2e9-4486-b10e-eed9c8ed3d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:a2:27:e6:15:25:3f:10:aa:54:79:c8:9c:
50:10:a3:e5:9d:b2:8b:36:01:55:6b:98:1b:fa:b4:
b2:35:12:59:4a:e5:02:54:42:6d:bb:9d:a9:4a:e4:
6e:94:ea:36:37:77:d0:2b:e6:36:9a:c4:2e:9a:db:
8f:67:07:22:1d:3b:02:fd:a8:9d:7c:79:65:ec:72:
00:19:e7:d6:1b:d6:98:fc:ea:21:4d:3e:b5:22:dd:
a2:49:0f:67:4f:47:42:df:82:3c:67:85:9f:fe:65:
3c:cf:55:7d:26:96:cc:64:f7:f3:6b:09:90:57:49:
3c:5e:ae:02:bb:83:f8:af:25:95:da:c9:06:10:83:
26:f1:0c:8a:16:0b:1e:15:49:09:20:65:a4:6a:95:
01:ab:ea:47:4c:87:53:87:51:22:74:15:5e:a0:b2:
a3:b7:83:97:38:14:2e:db:85:6c:c8:d8:51:50:4a:
d9:16:f1:dd:47:cc:c4:2e:04:7f:8d:b2:ba:ac:a4:
e6:c0:fe:73:e1:78:a3:5b:42:79:0e:17:94:54:8d:
1f:b4:2b:97:8f:3a:1b:88:20:22:81:0c:e9:a1:27:
29:24:06:5c:46:a4:2b:88:10:2e:a6:87:14:9f:84:
83:4a:b8:07:30:2c:0b:d1:d8:f6:70:2a:08:40:40:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:2C:65:77:DA:A3:D6:1B:DE:EE:78:10:04:BD:43:5E:4B:2D:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:27:a6:43:5b:bf:c6:6b:21:f5:44:4a:f1:ad:5e:ce:b6:fc:
e4:a3:b5:29:36:e2:0a:2d:80:fd:76:c0:66:e3:71:47:9c:da:
b9:c1:82:ec:cb:c0:b3:32:4c:94:51:ee:67:b3:7a:87:24:41:
e1:69:fb:df:80:4a:e8:ba:8f:6b:9e:7e:23:4d:bf:9e:31:d2:
fc:b3:6d:17:42:0c:b8:e9:ee:1b:2a:71:14:2e:bb:e7:c6:73:
cd:de:41:de:d7:60:6e:0d:d6:3b:82:c4:ba:81:82:ba:75:10:
23:71:2e:e8:c7:82:9e:04:a2:3c:82:f8:9e:08:86:ae:c6:ed:
e1:65:be:8e:2a:3f:06:6b:94:4d:65:1e:12:28:c9:fa:00:45:
94:20:00:e0:74:1c:58:23:30:8e:bd:bd:d8:97:04:b0:2f:00:
67:09:95:6f:5b:30:ed:2d:ec:61:ff:3e:46:71:25:03:c2:a6:
cd:bd:9a:aa:75:72:91:b2:9b:9b:ef:c5:4f:53:9b:f9:27:7f:
fd:13:8f:b2:04:e4:e8:7b:dc:7c:a2:e5:eb:31:88:e4:6d:22:
4a:8f:43:ab:fd:64:94:24:96:77:59:ae:e7:b6:91:53:4c:e4:
af:4b:b1:d7:73:91:0a:ad:cc:6d:b1:a1:18:f3:44:4e:36:79:
62:8e:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:05 2026 by rpki-client