
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7b21a8c-4aaf-3a26-adae-36473ae2d15d.roa
File: e7b21a8c-4aaf-3a26-adae-36473ae2d15d.roa (raw, json)
Hash identifier: ps1NJvN8lDqIjFGRlXAUTw4rMTpiESA8I04dcZhEas8=
Subject key identifier: F2:02:35:CB:2E:A4:C8:24:94:3C:E7:3E:EA:34:23:B8:04:C9:FD:65
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA7A0C6AEB50A8193F4269300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7b21a8c-4aaf-3a26-adae-36473ae2d15d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396549
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:c6:ae:b5:0a:81:93:f4:26:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=67ca89fd-3d64-45e3-acd9-ec551553da1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:23:f0:e0:ee:b8:44:d1:37:2a:7f:1b:89:
93:df:ab:f9:6f:48:56:86:e9:18:a0:79:75:86:83:
d8:62:2e:55:9d:1b:b3:89:98:5f:60:36:3b:15:a0:
bf:47:37:d2:34:28:5f:82:0a:a9:9e:65:bf:32:bf:
d2:df:8a:c4:8d:df:a3:71:c5:df:bf:6d:19:63:68:
32:1f:ed:6d:68:22:69:82:88:26:f3:1f:ea:95:b9:
ec:08:47:da:6f:bc:e7:f4:f8:03:45:bd:9d:d9:01:
08:45:33:ad:51:97:f4:c7:2d:ef:37:3b:a5:df:dc:
72:a8:c3:39:d8:35:95:0c:81:01:57:27:0d:ce:de:
dd:d8:2a:24:a1:26:1c:b0:b8:bc:29:4e:04:47:39:
ec:3c:fb:45:0c:e6:07:f8:82:6c:ab:58:26:a5:c0:
93:53:d8:b7:79:31:34:7c:a7:0e:f9:96:50:88:2e:
ee:77:2c:ae:dd:2e:a5:bf:d6:77:6b:3b:05:d4:08:
ac:f0:03:95:f6:4f:f4:14:a4:b1:f7:6b:ab:d1:bc:
1a:d5:69:6f:60:85:fd:d8:25:7a:f0:2b:9a:ea:9d:
aa:15:69:61:7e:cf:dc:00:e5:84:c1:34:14:2e:70:
15:80:50:4d:64:88:25:98:d9:d6:7d:c3:c2:27:cf:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:35:CB:2E:A4:C8:24:94:3C:E7:3E:EA:34:23:B8:04:C9:FD:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7b21a8c-4aaf-3a26-adae-36473ae2d15d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e7:02:47:ca:48:f5:b2:af:1a:bf:36:69:74:60:a9:c9:0a:
be:37:2f:54:04:63:eb:27:ca:b6:2d:1e:b2:e8:72:f7:e8:a2:
db:3e:82:a6:12:90:56:c8:31:f0:e8:00:1f:a7:b4:d6:25:b9:
26:55:93:cb:75:eb:ef:a4:62:f5:eb:61:b4:63:c2:fb:5a:d6:
95:77:da:66:06:49:c5:8e:88:69:d0:c6:bd:7d:ac:8c:bb:a7:
1b:a7:e2:bb:f0:65:ac:20:ae:2b:45:4d:d0:5d:79:de:76:8d:
67:d1:ad:ce:d3:ac:fe:ec:fb:a1:3e:98:81:3f:3f:0b:ab:e5:
1e:41:f5:65:67:bf:f6:b5:1d:da:4a:16:b2:95:ca:84:45:fd:
42:73:58:42:c3:42:86:09:48:10:3a:ee:9a:55:6b:01:db:ea:
c8:a6:30:1b:49:98:28:6c:df:96:7c:a7:aa:c6:a4:b8:e5:33:
fc:f7:af:0b:8b:6f:90:c4:f2:5e:a8:ee:3a:a0:eb:7c:0c:d0:
81:c1:40:c8:86:1c:d4:71:1e:f6:7c:8a:20:78:de:49:46:da:
e9:ee:a7:63:d4:d9:18:f2:12:67:cc:3d:11:19:69:f3:39:37:
22:71:e1:06:99:d0:30:96:11:3f:0a:7e:f4:a6:7b:db:ad:46:
c1:44:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:05 2026 by rpki-client