
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d9a7df-6d8d-3bfe-89d5-31fe186e6cc2.roa
File: 04d9a7df-6d8d-3bfe-89d5-31fe186e6cc2.roa (raw, json)
Hash identifier: 1IxsPw/L03ggeS9xQnWOIohZKwAln6wLETKehDXWFvM=
Subject key identifier: EA:7B:F5:EA:D5:0C:A1:85:C0:7B:67:40:A5:06:2F:1E:DB:86:57:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4C3D5F5BBBAAC108075CAA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d9a7df-6d8d-3bfe-89d5-31fe186e6cc2.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 10515
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:5f:5b:bb:aa:c1:08:07:5c:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=15121de0-2b54-4672-a5f1-b089822a26bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:25:f8:8f:d3:26:68:66:97:a3:4a:b8:d1:
27:5d:45:11:5d:36:5f:66:ea:a1:9c:36:a7:8a:b9:
36:47:66:ec:d3:52:79:8b:58:dc:d4:79:5e:aa:b0:
68:d1:a2:de:c6:a4:90:d2:1e:1b:98:73:a4:9a:e6:
b3:cf:bc:e7:ea:aa:08:99:39:20:15:85:8a:05:ae:
5e:89:72:65:d1:e9:43:e0:d8:f9:a3:23:df:71:68:
8a:79:c9:14:d0:f1:0b:38:65:b1:dd:f0:06:51:04:
8e:32:7a:49:90:d0:ca:3c:1b:db:de:af:2c:9c:70:
01:63:8d:15:b0:58:31:16:09:69:6e:f9:95:ae:fa:
18:81:d2:c0:3c:ae:ad:a8:55:af:40:3c:33:6e:14:
14:c2:3c:4a:bb:b3:05:e4:28:58:a2:85:cf:6a:54:
dd:61:8c:ad:90:f2:07:24:2e:7d:db:1e:62:b1:ec:
f3:05:92:38:61:0a:44:e1:e7:71:46:d1:a0:6f:4e:
c7:62:37:f8:95:d4:64:ce:53:e5:34:a3:1e:fa:5f:
24:5a:2b:00:7c:57:ec:8c:22:1b:47:07:a3:24:55:
75:7c:54:92:5e:f1:3c:ca:6d:00:a2:96:71:75:03:
aa:a3:94:0e:fb:71:31:7c:c1:d0:fd:2f:23:81:30:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:F5:EA:D5:0C:A1:85:C0:7B:67:40:A5:06:2F:1E:DB:86:57:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d9a7df-6d8d-3bfe-89d5-31fe186e6cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:d0:64:c8:0e:7d:57:09:40:26:c5:4b:41:27:79:c5:84:29:
36:d1:12:79:04:f4:e6:74:e6:d0:4e:4f:bb:07:15:07:3c:0b:
55:e8:35:d6:f7:be:81:6e:23:e3:63:dc:cd:38:e2:1f:34:7c:
fa:62:e7:a6:e4:63:52:00:30:9a:8a:f5:28:e1:42:c4:15:73:
38:f3:ce:f7:47:5f:0e:7e:9b:3b:84:5d:fb:14:1f:7c:8b:99:
f4:70:a8:16:61:d0:71:9d:af:3c:ed:a8:a9:5d:03:59:cc:f8:
15:85:48:13:af:70:44:9a:86:cf:05:37:98:3e:97:8d:5a:4e:
6d:56:6f:f0:8e:32:fc:08:00:0a:d4:1f:87:5c:b2:52:e1:e7:
0e:4d:b5:53:45:0d:f8:13:88:57:6c:55:e8:ec:6b:5f:80:d9:
9d:99:8d:a7:52:de:06:c6:2b:33:87:4d:b1:c9:f3:1c:16:65:
c0:09:32:06:35:8f:62:07:68:e6:c0:5e:c4:ca:a2:fb:1a:f3:
5f:9b:eb:5f:a7:35:60:7d:7d:14:77:c6:4a:00:15:35:19:a9:
7f:28:b8:7f:d0:03:3d:b4:30:6a:1e:69:5c:fe:18:1e:fa:05:
1b:3a:f9:a0:bd:8c:32:cc:52:f5:79:f0:fe:90:69:0f:46:11:
a1:ab:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:56:49 2026 by rpki-client