
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa
File: c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa (raw, json)
Hash identifier: v9HtLW8ittEk417WBpPNzkAUNFCuWNWpaDcqCOerxKQ=
Subject key identifier: 92:3C:32:7D:70:C1:6D:B4:E5:AC:25:3B:9D:0B:9E:04:00:CB:57:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D5E1A45A20CE6975C9F999780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 40647
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:45:a2:0c:e6:97:5c:9f:99:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=2646817a-d757-45a3-a30a-e9db2f988a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:be:c7:c0:21:59:f0:91:e9:83:34:01:1b:
5c:78:27:62:12:60:9b:79:57:a1:ac:a0:b4:a6:ef:
b6:c1:02:7f:6d:ed:c1:3c:28:fa:52:d5:d0:fa:14:
1b:7b:d4:45:cb:3e:ee:18:a8:2f:8b:df:c5:5e:79:
68:52:95:49:96:6f:8d:4c:1d:0f:ec:ac:2f:6f:ee:
83:e8:c7:99:bc:19:8a:d2:a5:99:35:65:ba:13:2f:
8d:69:9a:e8:23:7f:ea:ce:fa:70:7b:d1:b2:99:75:
b5:83:49:84:2c:0c:ce:24:61:ff:d8:1b:5c:11:df:
f1:c0:9e:c6:94:f5:19:da:2a:31:be:b4:a9:fa:6f:
05:07:47:48:aa:ff:11:7a:f9:e8:fa:3e:b6:4c:97:
6a:91:54:fa:b5:39:ef:81:3d:61:96:b8:ab:27:27:
b8:36:08:27:4e:0d:4f:f6:db:69:53:05:3c:c6:cf:
a7:d0:92:41:7a:de:92:ef:e8:f6:bb:31:d7:de:2e:
2a:0d:ce:d7:ef:94:19:7a:ec:06:57:74:0c:09:15:
5b:16:89:75:6a:5f:9d:b1:3e:1f:ad:97:3b:46:ea:
30:8c:c9:2c:16:11:10:ec:ac:76:59:aa:5c:25:b0:
b3:90:ef:41:76:64:75:2e:8d:29:8f:cd:af:91:88:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:32:7D:70:C1:6D:B4:E5:AC:25:3B:9D:0B:9E:04:00:CB:57:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:2f:fc:d9:5b:59:e9:c0:87:13:42:95:cb:40:cf:46:e7:51:
9a:80:2b:43:50:6a:c7:94:e7:38:44:ea:38:a1:7f:9e:69:3c:
e8:3c:1f:b4:2d:e9:5e:2a:73:2b:02:fe:62:40:f3:cb:00:70:
10:7e:5b:f5:eb:f1:be:7e:99:b1:9b:fc:c9:e3:54:87:96:24:
71:40:f3:81:17:f8:0f:5b:32:f5:5a:eb:0a:b6:c5:86:88:63:
5e:c8:3e:50:56:fc:21:67:34:45:6e:52:24:dd:b2:a2:d6:d5:
2a:54:77:29:90:02:18:1a:bd:d2:35:59:50:33:2b:9d:5d:a8:
99:0f:d6:37:0e:f7:57:0e:ac:1c:39:b0:f9:e9:3b:f1:00:23:
31:ab:2e:dc:91:4c:ea:70:63:dc:eb:9a:92:12:08:d1:76:1d:
c9:c3:21:34:04:55:ae:1b:4a:fe:9d:37:f0:f5:88:bc:23:79:
49:21:4a:14:b8:06:83:34:bb:ac:36:5c:9e:17:b0:0f:54:99:
2e:cc:b7:2f:98:0d:c8:30:66:97:42:16:7a:a8:1e:2b:60:78:
37:d9:ab:b4:10:9c:c0:6b:68:1a:51:27:7d:cb:e7:fe:27:8a:
20:ac:87:05:01:91:31:18:0a:1d:25:7a:0c:d3:3e:61:d9:3b:
fd:5b:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:51 2026 by rpki-client