
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa
File: dd659960-2235-3ea8-b959-e6885d93cff4.roa (raw, json)
Hash identifier: 6PVAhuKksHbnRWWAG0BDYip8ZzwkHhKBOydE+n4uSRU=
Subject key identifier: 1B:A8:BC:CA:68:76:36:73:ED:79:5F:CF:4F:55:C5:EB:E2:62:46:D0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D732BDE6D09FA6B9AF4D1F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa
Signing time: Thu 09 Apr 2026 14:07:56 +0000
ROA not before: Thu 09 Apr 2026 14:07:56 +0000
ROA not after: Wed 08 Jul 2026 14:07:56 +0000
asID: 396588
IP address blocks: 2001:500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:2b:de:6d:09:fa:6b:9a:f4:d1:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 9 14:07:56 2026 GMT
Not After : Jul 8 14:07:56 2026 GMT
Subject: CN=e49a8c7b-177e-45ab-aa2d-969c0de51d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:0a:bd:e3:22:4d:88:df:f6:f2:ac:99:e7:
c6:64:98:fa:3a:8e:c8:97:2c:3e:6b:2b:b3:fb:47:
e9:2c:7e:10:ff:31:93:a1:66:f8:97:d3:8e:dd:67:
e6:3c:64:32:ad:9b:2e:10:1e:d4:5b:54:e2:57:19:
43:56:68:81:4c:25:ed:ac:fe:5b:a9:1f:d8:0f:00:
9e:a5:a6:01:b7:e8:84:7d:31:7b:59:bb:e1:84:10:
ec:7b:df:73:51:f8:97:20:fa:7f:71:92:db:63:f7:
51:2e:00:69:5a:2f:e3:79:89:bc:9d:b4:d3:0d:1c:
67:5e:86:61:e4:ce:fa:af:fd:a2:cd:9f:3a:b7:d1:
47:bf:24:3c:2c:80:a2:fb:18:fb:d9:6d:92:bf:4f:
98:0b:ee:5d:c6:99:30:80:7e:f7:15:78:14:1c:ae:
1a:86:6d:ac:50:e7:96:bb:7b:74:82:6b:88:99:38:
59:7f:30:ce:c7:a7:8d:37:25:7b:76:a0:58:2d:e7:
95:71:a8:8b:8a:ef:68:05:90:9e:4a:a8:68:50:c9:
4b:d2:0c:47:a4:ea:7f:84:0a:d9:30:f8:b8:5c:86:
f2:34:f3:18:e3:37:85:66:67:69:9d:48:94:5b:75:
8f:14:f0:06:99:17:69:6a:d9:3d:c2:e9:06:41:2d:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:BC:CA:68:76:36:73:ED:79:5F:CF:4F:55:C5:EB:E2:62:46:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1a:66:81:fe:af:59:6e:d9:bc:71:dc:62:6d:87:74:34:d6:
9f:5a:db:a7:94:2e:2e:2e:4a:37:20:20:30:a0:8a:5f:30:c4:
45:99:6e:82:04:e4:69:db:0e:5f:f8:7d:a7:53:c6:9b:68:ee:
98:ea:5e:64:21:39:e1:25:f4:b8:85:e3:ba:1b:36:46:63:c2:
8f:44:ba:10:dc:9e:d0:12:f4:11:17:3b:4e:a6:d9:ac:88:c0:
23:2f:fa:f8:82:81:9d:08:0c:86:84:19:dd:2b:be:ba:c7:7e:
8b:c6:2a:98:15:b2:c1:7d:98:ee:0d:42:9a:68:8a:c2:8f:b5:
90:9d:88:c1:c8:19:15:f4:dc:a5:23:8c:ac:49:09:af:a1:d0:
1d:ff:8b:f4:aa:84:d3:7b:b1:72:fc:f1:03:c7:25:03:06:19:
2e:1a:32:37:d3:78:ec:47:e2:ac:cb:e1:28:7f:2a:55:0d:31:
6b:ae:0c:5a:82:d6:a8:a0:f1:40:b0:da:33:74:fe:e0:7c:f5:
7f:b9:12:e6:9e:e4:6a:56:54:4e:b0:bd:74:23:b1:61:64:a0:
9f:dc:f1:0e:18:6a:b7:9a:4a:93:41:e5:da:d1:09:7f:ca:99:
ae:98:e4:ba:00:31:49:0c:88:a8:cd:91:de:ed:a2:68:cc:a9:
26:64:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:07 2026 by rpki-client