
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
File: e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa (raw, json)
Hash identifier: H4m3SwxqvOPujbnR4zy08Cgx8/bPbrp14FDH5Zy1CDM=
Subject key identifier: 76:A8:90:CE:56:3B:7C:D5:B7:84:D5:2D:C2:46:53:D7:CE:5C:D3:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D7A05462DC38B53027516D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 396612
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:46:2d:c3:8b:53:02:75:16:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=a36d00b1-feca-44d5-b144-e630e632a300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:e5:fb:e2:10:ab:81:69:df:c3:6e:a4:7d:
ff:69:bf:e2:be:90:c8:a3:15:a6:d5:c3:fa:70:de:
09:8a:77:06:b0:bf:32:5d:cd:98:6d:63:51:2f:82:
31:44:9d:bb:58:27:d2:e8:03:4a:b0:3d:1a:f9:2e:
aa:31:e6:b8:83:0b:71:3f:ae:8b:fd:25:1a:d4:58:
03:9a:61:46:a2:5e:1b:42:db:1c:bc:09:6a:a9:4a:
a7:b5:89:26:64:4a:1a:0c:63:6c:65:c3:9f:9d:7f:
d0:67:d2:c8:1f:83:40:85:ce:52:11:88:6f:d8:2f:
e5:56:eb:56:22:4c:d6:ff:85:2c:83:c6:a2:fc:8d:
79:c5:60:40:40:80:ad:94:00:36:8b:72:64:ab:a5:
c8:7c:8f:aa:c2:8d:14:3a:03:fc:3d:98:41:3a:02:
50:18:1b:fb:e1:4c:92:2f:3c:c3:21:0e:e6:4c:ed:
a5:8a:e1:01:01:da:aa:a4:a1:e3:2e:5e:c2:ab:63:
79:27:1a:3b:52:e9:5a:c5:b4:af:7b:d9:7d:65:8c:
33:4d:72:e2:10:50:2a:f9:a9:6b:f0:bf:86:ac:c7:
74:cc:b8:6e:ae:80:3f:13:38:c5:4b:b9:6d:b7:a3:
53:6b:f0:50:86:0c:6d:cd:15:ca:da:01:2d:b3:ec:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:90:CE:56:3B:7C:D5:B7:84:D5:2D:C2:46:53:D7:CE:5C:D3:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:7d:ba:9d:57:7d:13:21:7d:91:57:53:bf:49:f6:79:b0:80:
81:78:da:63:bd:f7:c8:6c:da:2f:78:e7:05:5d:f0:10:9d:c0:
79:b0:36:5d:f7:52:6c:c9:4e:81:36:0a:e3:7a:ad:2e:fb:06:
24:23:78:ad:45:06:cc:54:a8:1d:1e:91:ec:2e:70:dd:80:2d:
9b:bd:58:2b:53:98:6a:b3:7b:12:f8:55:1b:c5:42:4f:56:13:
10:aa:e7:29:84:c4:c0:eb:73:37:da:5a:4f:ff:78:ac:75:5e:
b5:d0:0d:2c:0a:89:8c:11:0c:18:9d:29:e9:83:d9:13:50:0b:
74:2d:37:9f:e9:d4:c2:ae:60:9c:ef:03:39:07:69:21:62:6a:
28:26:51:71:50:c9:7b:c2:4c:52:ef:e3:69:f4:2f:50:79:b2:
e5:1b:2a:a4:cf:ca:d5:a5:9f:87:52:3d:b2:75:bb:77:db:a4:
38:41:fb:3a:2f:81:f6:ef:83:91:27:9c:af:68:52:c2:5e:ad:
de:ce:a7:ac:de:a5:b0:59:3d:c4:3e:20:bc:78:58:52:03:5d:
74:ab:59:0f:36:4a:1e:f9:b9:28:df:b4:57:e8:f7:48:1d:3c:
74:dc:4a:e9:47:01:29:f1:c9:d3:7e:98:0e:8f:ee:6c:0d:af:
dd:5a:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:30 2026 by rpki-client