
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa
File: 021cebc6-a5be-3609-ae8f-692d71e2b480.roa (raw, json)
Hash identifier: D4fdW7fsDYBMKXZGdXjqT6SIgjisTR4rpb/Trtncl0E=
Subject key identifier: A1:79:8E:A0:1B:A4:4E:8F:FB:C0:21:5C:6E:61:32:16:0F:38:FD:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E4DB9EE7B69BCC195F5587280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa
Signing time: Fri 26 Jun 2026 21:00:11 +0000
ROA not before: Fri 26 Jun 2026 21:00:11 +0000
ROA not after: Thu 24 Sep 2026 21:00:11 +0000
asID: 396592
IP address blocks: 2001:500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4d:b9:ee:7b:69:bc:c1:95:f5:58:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 26 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=091c7be9-5c28-4468-90bd-0511df2f4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:2b:96:46:88:4d:00:95:5c:3e:dd:e2:ec:
c0:63:f6:a5:48:ae:d0:50:2d:fa:3a:ff:94:33:8d:
0f:71:0b:0c:e2:34:e0:44:64:70:d8:59:fb:5a:9c:
e7:6b:1f:ac:a7:fc:57:07:05:f4:7b:c8:d7:cf:2f:
b8:a4:e8:bc:4d:44:fd:00:61:ff:db:9a:b9:b8:65:
5d:63:9f:96:69:29:c6:d6:d6:a1:f4:74:57:49:45:
a4:60:0d:ff:88:90:21:a7:50:3c:01:49:ba:8a:a1:
5e:f4:3e:43:c9:d1:ef:5c:2f:5d:71:74:82:c9:88:
d1:8c:bc:20:54:c8:b8:9a:7b:70:fb:d1:62:83:bd:
7b:45:41:54:c8:a5:23:8f:11:47:c9:dc:7c:30:ac:
fe:d7:90:7b:4a:e3:61:b9:97:ff:c7:ce:80:6f:43:
bb:6b:d9:d5:3d:fd:5f:ca:5c:9f:3c:62:7a:e4:aa:
cb:ea:09:12:67:e7:8c:bc:c3:90:34:b3:fa:9f:83:
be:35:fe:31:88:93:d1:34:38:07:e8:28:4f:30:9e:
a4:70:16:50:e3:56:77:7a:ee:b6:b2:54:c7:41:91:
85:49:f6:8a:94:6d:56:48:18:29:f8:2a:41:82:56:
c2:00:6a:8c:35:d9:93:46:3f:fc:12:fd:1e:53:dc:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:8E:A0:1B:A4:4E:8F:FB:C0:21:5C:6E:61:32:16:0F:38:FD:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:8b:8a:0c:19:b0:d5:89:6f:c8:e7:3f:a8:02:b9:ef:46:ef:
d5:03:d0:ca:d2:9f:a4:bb:4a:40:37:b9:3f:6b:7e:77:4d:66:
f9:13:c2:9a:5c:77:d3:47:94:a3:8b:93:28:d9:28:4e:e1:b6:
fa:05:e7:bf:da:2a:bd:51:77:d8:d6:1b:ee:7c:d2:71:6d:e6:
a1:59:82:b0:d9:f6:6d:9a:91:a4:b8:61:60:26:77:8a:63:14:
0e:91:73:b0:8f:0c:f0:9c:2c:5e:36:8e:44:ff:01:73:e3:2e:
c7:8a:b7:5c:44:68:85:59:1d:fb:98:33:27:29:bb:20:9a:9d:
22:b2:a5:7e:d2:6a:c1:08:fc:d1:e9:ee:1e:f5:37:3b:81:d9:
1b:5e:3b:8f:af:77:41:a7:ba:a7:45:2a:c2:f8:1f:4e:88:26:
02:cc:67:7c:bf:d6:83:c2:dd:c4:c8:30:fe:d9:84:29:51:d8:
aa:55:35:d0:bb:d2:26:33:be:d6:66:64:dc:ed:6b:6f:43:92:
d3:c3:b2:fd:39:d1:4e:5f:c9:62:43:9e:48:5f:81:b2:b4:f7:
1e:df:67:0f:07:85:fc:66:49:a8:d4:7f:4f:68:fd:de:d4:2c:
1c:6c:5c:1f:98:09:91:43:12:92:99:0b:6e:89:5e:5c:5d:ec:
db:58:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:37:08 2026 by rpki-client