
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
File: 43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json)
Hash identifier: gzhYyKJps9PYKyU/CoCVWg3ybmRGl5l/AOlxlIMKRvU=
Subject key identifier: 5E:11:D5:7B:45:C7:EA:80:46:CE:43:11:22:DA:36:52:A8:35:5F:92
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA79ABB46233934D833BE7D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397203
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:bb:46:23:39:34:d8:33:be:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a5996d32-0aee-41dc-b61a-3b05e9dc0a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:6a:82:70:0c:96:cd:c2:d9:3d:3f:e0:06:
21:4c:58:73:f7:40:b6:b2:88:2f:7b:95:27:eb:1f:
b0:13:bd:1d:ba:1f:af:9d:28:03:72:5d:72:6b:2a:
01:fe:93:27:6b:da:5c:68:da:9c:b3:fb:9e:e2:27:
8c:cc:c2:84:ca:fc:75:59:8a:2c:5c:c0:7c:a4:ea:
5b:4f:3a:7a:42:62:c1:da:c5:c1:b3:7c:61:6a:78:
51:b1:0e:44:39:04:f1:7f:55:75:1a:6c:78:e2:d9:
fe:f3:d1:eb:12:65:a0:6b:17:16:42:62:95:cd:bd:
25:35:75:72:17:fd:57:ea:59:8b:d6:55:66:5f:2b:
f3:3a:5b:26:69:35:d2:41:62:cd:f3:7b:d7:da:c5:
26:57:ea:77:f8:5e:54:f2:c3:5f:fd:20:0f:0d:58:
a3:15:f9:88:56:28:b9:a7:59:29:1c:eb:b5:1d:18:
56:d1:69:1f:87:9f:93:a5:79:30:d5:bd:cc:20:90:
10:4b:8a:3d:12:bf:7d:e6:1f:b7:d8:25:f8:b0:1f:
58:77:f5:01:c9:a6:66:ab:d3:2d:d6:5d:63:41:ec:
bc:90:1a:d0:94:0f:4a:80:d9:89:07:1c:6f:67:e8:
eb:04:ea:3d:bb:f0:70:17:f7:25:55:f4:55:16:c6:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:11:D5:7B:45:C7:EA:80:46:CE:43:11:22:DA:36:52:A8:35:5F:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:74:f4:18:96:ee:95:5b:b6:04:21:b7:d3:2d:5c:f9:c0:bd:
6b:ab:a2:75:65:f8:13:86:13:de:55:99:ce:59:e6:f0:ff:d4:
1f:23:8c:15:f4:43:8e:70:90:08:fb:59:c5:18:aa:d5:db:19:
7e:21:22:ed:58:1f:34:08:3c:97:11:b2:81:f6:50:95:a4:a8:
76:3a:a3:75:cd:14:88:1e:53:77:bd:98:41:02:bd:50:a9:6a:
a1:4f:65:8e:93:e9:26:f2:2b:cc:78:79:f7:34:99:26:ab:05:
c8:21:8d:f7:2f:3c:99:2e:56:bd:52:ee:dc:b4:9e:2a:8f:56:
86:d5:f1:59:89:6f:3e:6f:82:f1:d0:da:f4:28:52:15:0c:a8:
03:b7:6a:79:ec:d8:cc:18:cd:58:e4:bf:52:88:c3:08:1f:26:
c6:06:27:c2:11:c2:52:d0:a7:ae:89:d6:57:a2:1f:cd:aa:a7:
b7:66:f8:db:2b:61:cd:b5:ee:9d:89:43:0f:f7:70:74:87:52:
6d:53:50:49:2d:6f:08:60:c2:30:c9:aa:8e:de:7a:ca:b9:74:
cf:40:46:51:37:52:28:71:d0:04:17:4f:d9:92:40:7f:da:12:
fc:1d:b1:ed:35:de:e9:97:7a:ea:db:b0:b5:e7:1a:07:8b:b6:
f9:2c:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:18 2026 by rpki-client