
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa
File: cf616b5a-bc54-3c7b-8d70-f3755938a894.roa (raw, json)
Hash identifier: DCDEGGP0Lpp3CpyPj03bg48744+L9JmW6AwtgQLrTs4=
Subject key identifier: 63:86:FA:10:1A:D9:21:87:00:78:04:71:04:C2:CA:EC:36:06:56:35
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CED27B6D4455C3321260F4380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 396613
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:b6:d4:45:5c:33:21:26:0f:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=16cca090-ca08-404e-82c3-fd863aee195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:ff:17:18:2c:f4:6b:20:b0:03:34:b9:1a:
79:2d:b9:78:f7:b4:0f:f1:59:a1:f4:bd:59:fb:84:
ed:bc:de:18:e1:e9:6e:e2:1f:06:42:62:80:24:7f:
ba:17:9e:24:0f:a3:8c:43:89:20:55:0a:3c:86:75:
b2:43:d6:2b:80:7a:bb:18:f1:ba:9b:18:69:59:14:
95:da:2d:ef:63:81:70:98:d4:80:3e:e7:99:27:bc:
5a:db:d0:39:87:e8:25:64:bc:2d:e1:fb:2b:7e:6c:
78:00:c2:83:3f:af:7e:c8:d2:07:44:0a:9c:88:ae:
e1:62:6a:ef:34:62:a8:65:c2:a8:a7:6c:3b:75:ca:
33:af:4c:cf:d6:db:46:9d:0f:c6:f8:02:6d:9e:c3:
e3:7f:cb:bb:f4:ae:96:a0:2e:17:62:a4:28:a2:02:
d0:42:ca:76:2a:15:a6:fa:77:bc:ea:d4:a2:65:99:
9c:a2:65:34:14:6d:80:d4:51:dd:b3:3e:8b:67:26:
10:bc:ba:c8:0c:e6:f0:d3:b8:0f:68:e1:aa:4b:b9:
bb:50:be:db:07:a4:0f:57:47:c5:0a:84:66:9d:42:
5d:b8:06:09:cd:bd:8a:fb:48:a8:a0:1b:7a:ff:2d:
3c:b2:5d:b1:b3:12:6e:26:cf:62:63:54:4b:e4:49:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:FA:10:1A:D9:21:87:00:78:04:71:04:C2:CA:EC:36:06:56:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ab:ae:ae:59:ba:80:35:98:09:15:d4:2f:cc:7a:2b:28:ea:
00:65:ee:96:7b:0d:82:d1:bb:0e:14:11:da:56:25:93:19:cc:
9c:b4:ba:e1:d4:1d:4a:05:e5:81:da:8d:ed:ca:5e:c5:09:e1:
2e:a7:8e:ea:e4:61:1c:1c:79:ef:c0:60:d4:54:1c:77:4d:4c:
79:1a:75:03:86:a2:af:3c:a1:da:e0:56:e6:ae:26:46:87:cb:
67:3d:a2:6e:0c:d0:2c:49:e3:2f:fd:80:50:fb:ae:67:e1:6d:
ae:57:1f:05:c1:05:8f:37:e8:c6:e4:60:1e:12:f1:31:4b:05:
c0:97:0f:ec:8d:ed:fa:81:06:3d:7c:71:fc:84:d0:f1:fd:96:
73:e0:59:bf:0e:9a:ac:2b:6a:fb:de:0f:7d:a1:92:4a:85:8b:
c7:ce:25:dd:29:8d:eb:5e:67:64:ab:a3:e8:b0:31:68:65:ce:
b1:ba:47:60:9d:94:d2:93:64:38:73:ae:1b:25:1c:80:48:ae:
5c:a0:69:d4:ce:b9:3c:04:4e:74:38:b0:e8:be:c7:f1:47:9d:
5f:12:cc:e9:d4:3f:0a:9c:92:3e:0f:d0:cf:63:d6:74:2c:73:
32:f2:9b:ff:37:d3:3f:3d:b9:a7:d0:bb:a7:c8:3d:8a:c0:df:
b6:5e:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:32 2026 by rpki-client