
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
File: cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa (raw, json)
Hash identifier: lGJnJyuyBI/37fWW2Rl6M30MvgpjsztigxIjPgloGX8=
Subject key identifier: 29:86:64:95:C8:03:7E:E4:C7:22:58:A0:B6:02:AD:ED:F2:2D:73:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E059C7959F41DD60CFC098380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 36628
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:79:59:f4:1d:d6:0c:fc:09:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=01808750-c13c-4138-8a27-0162df5aca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:62:45:45:85:df:59:04:3e:b6:8a:83:f6:
4f:93:c1:cd:3a:fc:7c:e2:54:b3:3b:44:18:97:9c:
35:db:fa:3a:a5:15:86:a1:70:98:f9:77:f6:ce:4f:
e9:be:16:cf:c8:4b:04:86:2a:9f:4f:b7:5c:b4:47:
7a:98:90:88:8b:72:bf:06:fa:0a:d8:84:d5:c6:44:
50:37:9e:ff:61:1f:26:b0:a7:4e:84:db:4c:e9:6b:
a3:18:6a:24:08:f1:a6:25:e3:f3:75:de:eb:9b:32:
d5:9a:d1:04:3d:70:64:67:cd:a5:50:6e:fd:2d:5d:
6d:77:54:25:b0:6a:74:dd:98:1e:21:32:cf:09:a8:
54:f7:06:40:cb:e1:2b:64:a0:87:86:c4:f9:c1:15:
24:c0:20:c0:21:f5:8e:c3:ed:bb:1a:69:30:72:90:
3b:c3:36:8c:ad:2a:0a:7a:ab:9d:ac:2c:e9:df:e8:
d2:95:a7:ec:bd:09:d8:33:d5:71:8f:43:2d:3a:1d:
b2:e2:a0:93:96:f4:1b:e2:df:0a:01:62:d0:17:ca:
68:d7:04:ec:79:c3:ed:72:fb:02:4d:01:cc:68:ba:
9a:95:4e:f1:5e:35:ec:20:49:3c:54:77:6c:7a:44:
18:09:f3:b9:95:0d:37:48:3d:46:c3:7f:22:39:51:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:64:95:C8:03:7E:E4:C7:22:58:A0:B6:02:AD:ED:F2:2D:73:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:1b:bc:44:54:59:31:9f:7c:ff:12:3e:eb:15:f2:50:52:b8:
2e:75:d5:cd:98:a5:13:d4:dd:a9:8c:fb:36:7e:0e:26:29:05:
bd:e2:60:b4:b4:f8:44:6a:9e:75:97:78:0f:31:35:b4:7f:19:
d3:cf:5a:dd:1f:01:89:b9:a4:ae:30:09:0e:62:ee:70:9f:96:
f0:c2:44:bf:b0:59:a3:7a:95:fb:cd:ef:0e:b1:8c:10:17:7c:
97:54:bb:52:30:46:33:1a:29:c5:44:0f:9a:89:32:0d:ee:77:
52:04:4a:fa:96:8d:d8:53:fd:6a:c9:9d:74:86:16:ee:f3:c2:
52:70:f0:ce:b3:c8:a1:a9:25:01:63:e7:ce:82:72:25:23:0b:
2e:b0:f8:74:20:48:39:3a:bf:30:00:92:c5:5b:46:20:b2:80:
e0:c3:ee:72:1a:74:36:6f:6a:af:95:7e:19:c8:65:ad:b3:ad:
c9:e6:5d:3c:23:fc:2f:5b:e8:e8:4c:c4:c5:44:6f:f3:a8:8b:
44:8a:03:60:53:2a:c1:d7:4a:73:82:52:4f:ca:7a:5a:57:af:
a9:b3:01:81:96:ce:d9:3b:cb:6c:c1:6b:64:18:1b:72:bc:d7:
1f:f9:5c:6a:4b:4a:d5:5e:bd:1f:35:ab:b1:c1:6f:69:17:5f:
2b:d3:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:27 2026 by rpki-client