
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa
File: c1a5e702-cfee-3606-8441-1552be143be7.roa (raw, json)
Hash identifier: hrAerkCixbsrdLHt40dxwiMH3cONfSHdOGx5rJyja7g=
Subject key identifier: 69:AA:C7:30:C2:5C:C8:AC:CF:A3:23:5C:28:3F:1D:DB:8A:7D:E9:B3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E3E5F1F0F02367241663ED088
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 397195
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:1f:0f:02:36:72:41:66:3e:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=2912368a-f9d8-4da8-8d7e-d9142e0b7a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:6c:e2:04:b2:37:17:d3:d8:62:1b:cc:cf:
68:bd:ea:2b:cb:2d:f9:6b:d3:83:66:fc:f0:e5:f5:
ef:2a:99:80:24:a5:9d:2e:13:d0:2d:43:e1:a8:1e:
c3:6b:4d:11:fe:af:3f:15:ee:59:4e:e7:de:88:8d:
6b:34:fb:1a:92:04:f8:30:9a:e3:2d:f7:7b:c9:a1:
4d:f5:f4:dd:79:89:f7:bf:9f:a8:df:7b:33:40:69:
b5:3e:b6:9d:b5:f6:ef:65:7b:a9:ac:49:92:ce:22:
ee:69:9b:55:51:73:31:92:6d:17:aa:62:11:9d:81:
33:89:be:32:67:10:b8:c4:48:de:17:37:5b:9c:53:
60:38:c3:cd:aa:06:16:e8:26:9a:af:05:3e:75:fe:
cf:82:a2:1a:70:df:71:dc:eb:ac:42:11:27:6e:00:
84:f3:51:ef:4e:0c:60:0b:33:d7:86:c4:12:25:f5:
5d:48:f4:76:5c:5a:12:0d:65:5a:92:79:2e:14:4d:
62:cf:34:6a:e3:07:b8:0d:5b:22:00:7e:14:c7:76:
b0:f5:6f:0c:45:6d:52:34:6d:8c:eb:47:9c:9e:43:
e7:4b:03:a3:06:4e:6d:f1:b5:40:b3:77:1c:cf:e5:
00:b2:e8:56:94:67:ea:48:0f:ba:a8:44:cf:e3:22:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:C7:30:C2:5C:C8:AC:CF:A3:23:5C:28:3F:1D:DB:8A:7D:E9:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a5e702-cfee-3606-8441-1552be143be7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:2b:06:1d:d8:23:d0:bb:e8:f7:40:93:76:50:d9:f1:bb:56:
70:d2:0f:72:86:46:24:c6:c3:b9:d1:1c:2b:ea:3f:ca:bc:29:
ef:9d:40:c5:a0:91:72:8d:4d:42:7d:db:17:4a:75:9a:e8:50:
2a:d5:90:84:a5:a7:e6:8f:86:62:04:68:b7:43:dc:8d:91:d5:
fe:00:09:b4:e3:aa:6f:7b:86:c4:aa:11:9e:5c:7b:e5:18:b6:
30:35:6c:b1:71:86:c1:2c:cf:8b:19:c4:98:a7:5e:57:f5:19:
a2:84:40:53:11:24:98:a0:a9:79:13:e1:0d:44:8a:c9:e1:04:
b1:5d:d8:3c:77:93:4c:52:83:01:57:1a:3a:58:0e:7b:0e:08:
a7:f6:f5:1d:cd:36:92:76:33:95:c6:f0:0e:9e:37:18:d3:86:
7b:5e:b1:fe:8c:bd:0a:f3:3d:51:65:47:2d:1f:de:70:c2:a4:
aa:a7:1e:93:3c:06:72:64:f9:c1:89:1e:01:7f:82:10:1d:26:
49:12:3e:27:84:0f:cf:02:6c:42:fc:0d:87:83:50:33:36:6d:
a1:bf:fb:37:41:29:a2:81:20:86:28:42:ae:6b:2c:4e:a6:40:
9a:1e:f8:9b:d2:a3:a0:61:ca:8b:98:84:67:8f:b5:9b:1d:de:
97:f7:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:41:33 2026 by rpki-client