
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa
File: defae45a-66a3-332f-95cd-9ffa0e1ab851.roa (raw, json)
Hash identifier: uq9hOKBBPUr+1BwFHWGPRx61WnQslAqU/PJxccOgh/c=
Subject key identifier: C5:01:B2:BC:A3:31:B4:F4:02:12:DA:FF:FE:24:65:35:7B:6C:DC:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E07009FB1212966764B60D640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa
Signing time: Mon 01 Jun 2026 13:00:10 +0000
ROA not before: Mon 01 Jun 2026 13:00:10 +0000
ROA not after: Sun 30 Aug 2026 13:00:10 +0000
asID: 396595
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:00:9f:b1:21:29:66:76:4b:60:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 1 13:00:10 2026 GMT
Not After : Aug 30 13:00:10 2026 GMT
Subject: CN=be4126a9-d264-4104-8b77-b79554db3fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:71:6d:0e:88:f9:f3:95:76:33:ea:cf:4a:
b9:47:de:77:3b:21:28:68:e4:7c:c6:89:25:29:44:
40:0c:73:89:25:c4:2f:1c:07:73:8e:f1:b6:84:6c:
4b:1c:f8:fe:9c:d4:91:10:17:e7:b2:7f:86:d0:7d:
8c:f7:47:f7:ae:25:88:c6:20:57:04:5a:9a:7d:f1:
05:99:76:80:1e:ff:36:0d:ab:eb:44:2f:25:dc:be:
63:de:e6:11:59:14:2e:cc:a6:cc:6e:3c:68:25:45:
8f:18:23:bd:40:a4:75:02:d8:e1:5f:a5:28:03:70:
9d:07:44:43:22:66:be:c1:1b:59:a9:68:ee:84:3c:
e0:94:1e:54:79:3f:4e:72:99:0d:c1:f1:2e:82:b3:
97:43:99:63:ff:d7:58:2b:9c:ee:1a:fe:66:00:65:
63:19:26:eb:6d:eb:fc:63:42:4f:a6:7d:1b:95:f7:
6d:b0:60:d0:75:9d:16:0a:f3:07:b4:0e:d2:b4:5a:
1b:87:12:51:62:8b:cf:9b:fe:88:7c:3e:3a:1c:d5:
8c:83:6f:1c:91:d0:de:f4:ab:6f:35:01:f4:f6:f0:
86:8b:9e:d7:68:6d:23:cb:d3:90:2c:13:f6:70:b2:
7c:e5:88:b5:93:7a:31:bc:e8:af:eb:8c:b9:1b:a1:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:B2:BC:A3:31:B4:F4:02:12:DA:FF:FE:24:65:35:7B:6C:DC:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:42:38:17:fb:d0:75:2d:1f:96:d8:04:24:b0:a0:ef:d1:b2:
f8:16:38:56:67:06:e5:51:9e:02:75:d8:3e:9b:67:0e:c9:91:
93:96:50:40:47:65:f2:39:15:b8:73:7d:66:5f:e2:f6:cc:2f:
ba:da:cf:08:22:e4:83:41:86:e4:39:5f:a4:88:7c:f0:b4:66:
16:85:62:9a:a2:6e:e3:b5:8b:1f:e7:2d:d4:71:02:0f:34:c3:
15:ba:ce:67:38:4c:26:98:0b:72:c7:43:ae:4d:67:af:4b:b4:
34:e0:b8:1f:00:2b:2c:86:40:c9:c3:6e:c4:e7:dc:34:55:8f:
97:38:f2:78:5a:26:a4:09:17:66:36:1e:6e:04:0f:27:1f:9d:
7b:a7:9f:5d:c0:f6:a0:0b:53:4a:30:83:d9:72:dd:1e:0d:d5:
0f:2e:b6:cd:df:29:ac:3b:b2:96:91:ee:a9:25:f5:03:c4:8e:
b8:e1:75:0c:12:60:81:f5:cf:bc:97:4f:b9:ae:37:14:4e:d4:
ee:1e:c5:96:5a:f9:ce:c9:6f:81:93:23:09:f6:ef:79:6e:46:
e3:72:2c:f2:d3:59:e4:91:c9:28:03:1e:c3:0c:02:aa:a6:3e:
9e:4a:8f:11:61:8a:b4:3f:78:0f:24:b0:dd:a6:f1:63:c2:20:
5b:ce:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:00 2026 by rpki-client