
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc2f1c9c-aff4-35d2-98a6-61b4977426c9.roa
File: dc2f1c9c-aff4-35d2-98a6-61b4977426c9.roa (raw, json)
Hash identifier: gJUHwGWYbBu89JF+MUt1nJWQpOQ+HaXTwC1C3xRxQBE=
Subject key identifier: EA:B5:D9:E0:9A:46:FB:6E:84:4A:0A:02:2C:DD:B6:8A:1A:B6:D8:37
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D6DA198CF11AF210C55493000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc2f1c9c-aff4-35d2-98a6-61b4977426c9.roa
Signing time: Tue 07 Apr 2026 14:30:17 +0000
ROA not before: Tue 07 Apr 2026 14:30:17 +0000
ROA not after: Mon 06 Jul 2026 14:30:17 +0000
asID: 396827
IP address blocks: 2001:500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:a1:98:cf:11:af:21:0c:55:49:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 7 14:30:17 2026 GMT
Not After : Jul 6 14:30:17 2026 GMT
Subject: CN=8f3ddc81-69e4-489f-b4ca-af90cf5d0ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:67:3c:cc:67:13:c8:35:71:da:77:9e:99:
ea:c6:8c:88:7d:1f:9b:04:3f:9f:ca:b6:12:6e:2a:
fe:f4:f4:16:f6:11:11:1f:67:f8:ca:90:7c:ae:c2:
45:3e:d0:ab:07:89:b9:5b:94:51:e0:e9:2e:b9:31:
6b:a0:83:de:a2:72:59:50:0c:7c:32:6e:fd:39:f4:
f3:34:b3:8f:38:c5:c6:4f:6e:52:fb:31:3c:1d:e3:
23:58:fd:d4:32:d5:7a:f5:bd:1b:9b:43:6a:17:9c:
3d:6b:fb:e2:22:3c:84:4c:12:2b:7d:47:06:b8:6d:
3d:28:e9:fd:e6:7f:ac:ec:c5:5a:89:c3:90:97:dd:
57:83:a7:dc:d9:cc:01:54:1f:0c:56:e7:c2:2b:3d:
df:ea:83:d7:d1:36:9b:05:2f:ea:00:60:ad:5f:6f:
45:fe:93:ed:9c:f8:82:b0:ac:27:9c:5f:9b:77:9c:
36:e8:df:16:49:ee:6a:2d:13:9a:82:b2:20:cb:a4:
e0:77:16:fd:0e:e2:7d:09:5e:bd:11:3f:31:05:c0:
b6:3c:84:be:a6:87:5a:cd:4b:2e:ce:28:32:b6:0c:
47:3b:b5:b1:df:1a:88:04:a3:83:76:3c:34:0e:3a:
e0:c3:c5:d3:6a:cb:6d:8d:dd:22:62:80:e6:5e:4a:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:D9:E0:9A:46:FB:6E:84:4A:0A:02:2C:DD:B6:8A:1A:B6:D8:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc2f1c9c-aff4-35d2-98a6-61b4977426c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:83:f1:4b:49:fd:17:a3:14:0e:4e:7e:35:b4:f7:e0:0f:e4:
0e:f7:27:ff:45:65:35:18:8e:63:95:bf:11:ca:f0:46:89:40:
7a:50:b3:ce:14:31:e8:ed:c6:9e:41:c1:41:f9:b6:e0:3b:f7:
8d:12:c1:8e:b1:74:11:e0:f0:68:ae:d5:ec:d8:8e:32:a9:40:
a7:9a:6c:b6:61:fa:a0:51:f8:8d:17:bc:2c:59:2a:b0:fe:4d:
82:65:dc:6c:47:5b:6c:75:49:aa:0e:1d:dd:96:10:ff:1b:51:
76:ba:15:d6:6c:e8:ae:30:49:03:f9:aa:55:33:83:e0:9c:65:
cf:8a:76:85:67:5d:46:f2:c2:78:f5:07:a4:59:0b:b3:f4:48:
0b:45:08:68:6b:f4:c4:85:5b:cb:b4:f8:af:65:6b:a7:1a:23:
e0:02:45:11:ba:dd:09:cc:8f:0b:91:5e:f8:06:77:97:fc:9d:
33:31:55:50:d8:20:dc:4b:83:bb:f0:a8:9f:da:b0:11:83:7d:
6f:ba:eb:03:1c:70:68:96:a0:cc:be:76:e2:19:09:f0:6b:a1:
0e:d0:8f:4c:13:0e:39:26:3f:28:fc:4d:7b:fe:93:de:6b:24:
2d:fc:c2:75:a2:59:d8:1b:28:70:aa:69:2f:58:80:4a:c7:0d:
1d:53:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:53 2026 by rpki-client