
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa
File: bf061325-c558-3622-81f1-a9fd51fa757f.roa (raw, json)
Hash identifier: x39YkSUcqNV4gYQuqQaLIXoIF63VLWNnGJJT14Fa9Cg=
Subject key identifier: E5:0A:90:CF:FD:20:E9:DB:BD:EC:5A:C7:31:3F:FF:5F:5F:65:63:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA79B29BEFA1D987C252DBAA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36623
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:29:be:fa:1d:98:7c:25:2d:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=53073e72-7bb6-4e93-b90e-5ffbe2a3f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:b4:78:78:e2:1d:64:96:dc:97:2c:ad:4d:
2f:11:96:4d:a8:61:a9:a4:fa:51:85:35:15:c6:35:
52:6b:a3:de:aa:a8:95:c5:a6:35:0d:62:b1:ef:2e:
5c:7f:cd:e6:6e:60:7e:4e:42:99:25:bb:d0:c5:be:
5e:e8:14:ca:ef:61:d4:87:90:a1:f1:79:36:ea:99:
80:c4:b4:56:9d:2e:fe:eb:11:0b:cc:15:eb:87:28:
eb:53:13:cd:bd:5f:62:77:90:42:8d:71:2c:65:c7:
01:81:14:6d:38:2c:f7:40:75:7a:fe:25:d4:4a:bc:
81:3f:de:02:d9:19:ca:c6:c3:63:e2:ea:26:4a:bc:
b3:22:31:57:b2:12:cd:16:dc:a7:b2:81:6e:03:80:
90:90:6f:30:8f:1d:4f:0d:9f:19:19:7b:7d:7e:40:
d4:cb:cc:00:2b:cf:cd:03:42:c5:05:4a:82:af:ec:
cb:4d:d7:19:be:31:ff:23:ce:29:51:ff:b3:53:85:
eb:0e:98:10:91:63:27:8e:16:3c:d3:78:d4:da:4b:
b0:48:63:20:e9:6f:40:51:91:9b:02:9e:fa:d2:50:
f4:18:bf:c1:37:2c:97:7b:6f:7a:90:02:6a:b7:ec:
23:0e:43:cb:95:63:4d:90:23:af:22:36:66:7a:e4:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:90:CF:FD:20:E9:DB:BD:EC:5A:C7:31:3F:FF:5F:5F:65:63:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:18:24:ee:d1:63:04:ad:20:a2:5a:2a:42:fc:b6:f3:d7:46:
44:0a:6c:63:db:b7:b7:3d:31:68:ae:01:9d:a7:84:80:15:f4:
7a:70:77:79:1b:79:a3:61:67:f7:4a:07:e7:3f:73:ce:b7:6c:
ae:44:e0:22:3a:e2:25:9a:1f:ed:0b:5c:19:2f:96:33:01:73:
d9:1d:52:d9:ed:be:75:03:31:1b:83:88:fc:e5:21:44:69:6e:
25:b6:1d:78:e1:dd:36:68:ca:dd:7e:e7:8d:02:03:1e:18:c4:
02:17:94:a6:1f:0a:59:16:1a:07:06:68:91:51:9a:f4:68:b8:
a5:97:53:49:67:09:dc:63:f8:83:ff:cf:bb:7e:8f:60:1d:f9:
3a:e9:bd:89:bb:22:6c:da:b0:55:46:7a:b9:91:07:6f:e2:f9:
56:8e:19:4c:15:dc:ea:80:73:d6:89:11:e8:df:ca:02:f2:16:
57:4e:31:70:1b:57:bd:6f:08:d7:76:32:40:45:4a:ed:06:0b:
1f:8a:86:bc:74:da:09:aa:06:d9:88:28:f2:bf:cb:91:3a:1b:
21:8f:5e:5e:6e:e6:72:6a:ab:45:08:26:e1:48:b7:d0:5f:4d:
22:bb:cf:ae:95:e2:04:b1:5d:28:89:66:b0:43:c5:63:64:9e:
96:17:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:40 2026 by rpki-client