
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa
File: c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json)
Hash identifier: VnXbyuEd6chIrEgWR9BoTbaU3fT1s9PeFGGHqllbPxE=
Subject key identifier: 5D:68:75:D9:32:8C:B8:CE:73:7B:39:9E:F3:82:0A:4F:D0:16:37:72
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E000609241BD4FDDDDF895C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396581
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:09:24:1b:d4:fd:dd:df:89:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=f58118f8-2435-4ed3-ab5c-2a471424c44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:b0:92:05:5f:1c:a6:55:83:21:92:2c:e1:
50:63:eb:b2:f9:31:de:fe:11:b4:a4:5a:f5:f3:4b:
06:7e:cd:14:16:a3:f8:72:c3:9f:68:8d:54:e6:5a:
57:e3:b8:7f:83:58:b2:4d:73:b6:c5:35:b2:17:77:
b1:55:a0:5c:6d:3f:9e:ea:98:c7:55:96:80:56:4f:
91:f5:7b:b6:bd:28:5e:10:14:eb:85:c4:f7:24:bc:
4b:9c:a8:00:8b:0d:75:0f:31:88:89:eb:05:1c:64:
36:e3:b0:a4:cc:83:fe:b8:4d:84:12:92:92:42:cb:
29:c9:d4:66:eb:52:04:0e:d9:e0:bb:bf:0f:32:a8:
05:91:1d:2a:e5:01:0d:0e:93:49:89:7f:16:37:a6:
c2:7a:64:b4:69:21:a1:db:70:dd:47:28:5d:8e:28:
13:6c:9d:86:d0:85:f0:28:68:76:ec:c1:d1:fd:48:
58:aa:a1:f4:7c:8c:b7:57:d7:e1:d5:e2:8f:45:9a:
50:26:32:1b:bd:07:ad:94:c7:ca:40:a5:86:c6:34:
b8:26:c5:0a:ff:87:ab:91:82:36:71:70:c8:ca:bd:
00:bc:93:7c:f3:b2:a8:1f:0b:a7:7a:02:0e:c1:35:
2e:39:a7:04:44:29:d9:54:72:44:b5:77:94:03:87:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:75:D9:32:8C:B8:CE:73:7B:39:9E:F3:82:0A:4F:D0:16:37:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:8a:a7:3a:ed:06:85:83:ea:e4:58:b8:f5:69:d0:ac:51:56:
fa:b4:df:e9:a7:36:a3:40:72:b2:62:9c:e6:bc:b1:e8:71:97:
fc:f2:17:92:4f:13:0c:2e:db:6b:24:1c:15:4e:5d:66:11:a6:
47:b6:bc:14:65:1e:f7:b1:7a:4c:8f:6c:e1:2b:8a:ff:17:bd:
5f:7b:13:9f:97:57:e3:7a:eb:ee:64:62:bb:80:36:ed:ff:97:
ae:0f:ef:ed:56:d4:59:0c:93:30:0f:58:7e:34:71:c3:08:7c:
89:33:ba:a1:ce:e6:b3:aa:a1:31:e3:9e:27:17:fd:d2:2b:72:
9a:3b:39:e5:bb:c1:55:b4:e5:34:cd:10:21:80:f0:33:6a:ee:
e3:ae:18:d4:66:6a:a7:2b:4a:b5:fe:71:9d:da:45:53:0e:8d:
78:ef:7e:32:90:a6:b3:cc:98:12:39:31:f5:eb:a5:aa:83:80:
f7:7f:a4:ea:32:5c:55:1e:4b:b8:fd:b3:8f:8b:20:b5:73:c6:
1c:fa:90:54:7a:97:d2:d8:d9:e9:a0:0f:aa:e2:d5:35:19:3d:
51:1f:55:e2:f5:e1:9a:17:f7:79:ca:fa:6a:84:a2:48:c0:0c:
86:c0:94:a1:a9:19:1a:8b:45:dc:09:6e:30:2b:c9:39:f8:e5:
4e:83:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:35 2026 by rpki-client