
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
File: be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa (raw, json)
Hash identifier: 8P5jIO+o+uadDGSnjMvejM+8g3uhOpHVbEbUquypD8Y=
Subject key identifier: 88:B3:CF:08:59:46:30:D0:0D:12:34:A5:19:0B:99:C8:40:11:F6:C5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D83CADAE4B590275A07F40300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 36624
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:da:e4:b5:90:27:5a:07:f4:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=5c32d63a-367c-46d5-9e33-0c1628820458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:45:5e:59:f2:d8:42:c5:f7:f1:40:68:9b:
e4:7c:87:3f:34:2c:39:18:26:f8:60:38:2a:1e:6d:
8e:63:98:f7:3f:92:d4:38:23:a4:93:a5:72:f7:18:
f2:92:a8:d7:49:77:98:77:c0:a1:b2:2d:f4:54:85:
35:70:b6:b1:27:ce:44:ca:31:23:9c:17:f7:14:8d:
58:90:27:0e:b7:a5:0f:9c:10:5d:e8:62:fa:a8:f9:
9b:d6:f0:bb:0b:98:cc:40:ae:3f:6f:a6:ef:3c:cf:
04:c1:e8:a3:88:3d:bd:74:d3:44:76:a4:35:aa:5a:
99:4b:b6:6e:b4:72:9b:ab:8f:fa:47:bc:8d:c6:f2:
56:59:82:0c:02:e9:2f:0e:f2:d1:6b:92:3c:fc:d4:
fa:9c:c2:03:18:76:e6:35:c1:e0:ef:81:65:ff:eb:
10:0e:88:fc:fd:68:36:cd:50:e5:39:3a:8c:00:78:
54:7a:19:ad:9e:12:19:65:99:ae:75:f4:24:e0:6c:
59:59:be:35:f0:b9:3e:ac:7b:e5:da:96:bb:d6:b6:
29:cf:1a:57:a8:48:24:6a:b2:51:ae:72:1b:6e:d5:
8a:f0:76:56:e1:96:ff:24:0a:85:b9:dc:66:0e:d3:
be:66:d5:f4:63:40:9c:a4:0d:fd:30:a8:11:48:82:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:CF:08:59:46:30:D0:0D:12:34:A5:19:0B:99:C8:40:11:F6:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:45:52:be:df:d5:8b:83:77:a6:8d:ba:1c:e9:eb:1d:7e:c5:
4f:ff:15:70:bb:0c:2a:d7:f4:b5:fd:1f:75:1e:af:a5:33:c1:
f5:40:a8:01:55:d5:56:fe:58:d6:af:ed:42:81:f4:df:df:92:
20:27:12:b0:65:66:dd:40:df:34:60:6a:bd:51:22:49:a0:0a:
89:63:26:83:77:23:0c:f1:b3:24:60:55:77:b3:59:83:0b:56:
83:50:fc:a3:36:c2:a4:8f:ee:b4:d9:7a:aa:25:fc:74:d4:cd:
72:18:59:74:2f:61:1b:84:cb:e0:63:b7:72:41:88:7e:e3:89:
e3:b1:2d:e1:42:22:1e:b5:be:aa:10:1d:09:ff:9b:e1:c0:28:
ac:0d:8d:57:9a:98:74:b8:38:de:e3:4a:42:61:dc:2e:82:19:
0d:00:92:a1:10:46:3f:6f:e9:b9:93:94:d8:84:51:00:22:19:
ca:16:97:8b:a9:2f:2c:13:f4:dd:d4:e4:db:c0:51:dc:74:7a:
1c:78:b0:62:43:69:e8:0f:d4:b3:41:48:16:36:a0:2a:ff:02:
b7:04:88:58:97:51:38:59:f4:c8:5b:51:a0:c6:05:af:b3:f1:
48:22:5e:fb:2a:42:c7:c3:b5:f5:ca:23:2f:1e:5d:2a:ee:66:
01:00:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:34 2026 by rpki-client