
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2de686-1523-386d-be27-2eb8daefe888.roa
File: be2de686-1523-386d-be27-2eb8daefe888.roa (raw, json)
Hash identifier: KbCg9V2thYc9sQvV5H0lUaeLwa9ZrDpJimvp92QJ7Xg=
Subject key identifier: 1A:43:F4:95:F6:D0:DC:DE:56:7D:5E:43:B6:4B:B1:FB:1F:02:CC:1E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E0F8B8834D0DD2FB01005E540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2de686-1523-386d-be27-2eb8daefe888.roa
Signing time: Thu 04 Jun 2026 14:26:47 +0000
ROA not before: Thu 04 Jun 2026 14:26:47 +0000
ROA not after: Wed 02 Sep 2026 14:26:47 +0000
asID: 397200
IP address blocks: 2001:503:d2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0f:8b:88:34:d0:dd:2f:b0:10:05:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 4 14:26:47 2026 GMT
Not After : Sep 2 14:26:47 2026 GMT
Subject: CN=640a34e0-86cd-4a12-8531-da70b3a1647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:12:1b:9b:d9:5f:fb:dc:6f:8f:23:13:99:
d2:f0:77:5d:e9:d1:33:cb:9f:b0:53:a0:1d:b5:2b:
43:1c:0c:10:d6:63:16:2a:f5:ae:fb:3e:d7:cb:39:
b7:b7:42:20:ff:ef:0f:98:9e:1a:29:07:f0:b8:3e:
eb:c4:91:47:35:51:09:80:b7:7f:a4:9d:19:81:3d:
db:0e:e1:82:27:a2:c6:d7:bd:b9:c6:5b:15:32:ba:
f2:c1:99:26:26:2b:3c:c5:f1:2f:98:49:2b:0c:7f:
e3:84:c5:52:28:18:b3:6e:ae:3f:bb:04:ad:52:62:
f9:83:30:40:5f:03:2a:dd:a3:1f:45:bb:03:88:ce:
3e:28:12:c0:95:69:ca:0a:56:a0:dc:b0:1b:79:c0:
30:19:0c:21:37:fe:28:4d:72:f9:d2:e9:8f:fd:55:
d0:26:17:29:d8:f4:d1:bc:c8:e9:3f:72:55:86:6c:
d8:5c:70:54:0b:eb:be:29:ce:09:1e:81:94:b6:14:
6f:54:66:c6:d4:d2:13:c5:38:4e:95:25:a9:32:d0:
a6:ad:3a:3f:cc:bb:e5:9e:b6:19:5d:b7:a1:0c:b4:
0c:fe:26:bf:57:17:03:15:05:54:de:3d:ff:47:ff:
57:9f:ef:2a:f3:fd:34:ff:c6:c2:9f:88:de:19:1d:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:F4:95:F6:D0:DC:DE:56:7D:5E:43:B6:4B:B1:FB:1F:02:CC:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2de686-1523-386d-be27-2eb8daefe888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:9f:8a:40:ab:be:0e:ea:4d:fc:cd:ce:3f:66:a5:49:c8:87:
29:14:a3:eb:4d:90:2a:05:8c:2d:19:ce:75:5a:e8:53:48:8c:
3f:95:75:a9:63:69:21:86:3b:89:d5:8a:74:e9:a3:c0:7d:34:
c9:91:46:1a:3d:36:91:ca:ce:5f:a1:bb:39:b6:36:78:75:af:
75:b2:f1:6c:d5:ea:62:b9:41:55:ab:64:bf:5e:49:78:70:89:
71:dd:5b:22:fd:0e:17:d2:66:f0:40:ae:f5:b8:87:b9:5f:bf:
9b:e2:cf:a1:3c:81:c9:c8:35:be:45:ba:7e:cd:1e:25:e6:f8:
db:d5:fb:89:28:d9:8a:9b:e8:f4:de:e3:92:b1:6d:a7:1c:c5:
b5:e0:ac:2c:82:a0:e3:3a:7d:cf:5a:00:17:63:89:78:90:b8:
00:88:31:69:51:ac:06:a4:ca:55:fa:04:4c:00:2d:fe:d2:08:
7f:a1:aa:e6:3f:05:f8:9a:8f:7e:61:38:c7:96:01:68:9c:ea:
ae:df:3e:91:31:33:a2:54:61:a8:fe:d4:15:74:85:d9:7a:bd:
df:e0:10:df:ef:59:6e:92:d2:1e:2e:da:fc:1d:6c:8e:f0:fa:
7c:76:f2:ff:d0:b2:ec:44:9c:9b:e4:4c:81:ac:8b:9d:33:d2:
a7:6d:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:15 2026 by rpki-client