
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09304087-afd3-3be0-bad1-c1206c8e1552.roa
File: 09304087-afd3-3be0-bad1-c1206c8e1552.roa (raw, json)
Hash identifier: C9RxzqhkQ17ceJGnhYGtbh4lXl33dK/0H0/oa8cOT78=
Subject key identifier: D8:87:43:6F:66:CE:EC:8A:0B:4B:16:B2:93:3E:94:C3:89:99:9A:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EDC91E160442F4C49E6FFEC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09304087-afd3-3be0-bad1-c1206c8e1552.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 396604
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:e1:60:44:2f:4c:49:e6:ff:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=e58b325c-1a2e-40e2-825e-677a468d9fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:39:52:af:2f:c1:8c:39:33:7e:d5:77:d6:
de:cf:55:40:5d:41:6b:5a:47:73:d6:63:7d:21:bc:
f6:d1:24:2b:f5:8f:cd:23:22:e9:cb:24:b7:ad:22:
fd:06:69:94:75:b1:3b:99:58:60:4b:96:ab:f9:b6:
0a:15:9d:11:c4:83:4e:53:30:28:5d:e7:c1:1c:51:
af:61:86:31:b9:03:7e:64:a1:2d:be:97:80:25:56:
2e:9f:f1:23:c0:2d:06:57:f3:1e:60:b6:b1:0b:f4:
d2:7f:a1:17:3d:e3:b5:62:2d:44:3c:1e:19:24:ab:
a8:c0:13:d5:3f:d5:67:55:1d:b0:35:3e:18:f0:56:
6c:40:36:a0:d1:b5:d3:d0:bf:ed:9d:8f:b7:98:5a:
95:49:19:65:c7:2f:20:46:89:2a:c9:9d:de:ec:eb:
f3:87:33:4a:ff:b4:ef:2a:8e:2d:19:48:fd:9a:fb:
bc:cf:6d:e4:94:68:7c:3c:67:e7:71:ee:c6:91:e1:
5d:78:68:33:b6:ee:19:8e:4f:70:40:36:3c:22:8a:
4e:08:8a:09:5d:5f:87:6c:ec:9c:31:85:22:3f:49:
c6:e0:7a:ec:60:c0:d5:c7:e6:4b:20:89:43:24:55:
a6:19:d3:c4:52:ad:a8:68:60:a0:e7:3d:58:5e:22:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:43:6F:66:CE:EC:8A:0B:4B:16:B2:93:3E:94:C3:89:99:9A:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09304087-afd3-3be0-bad1-c1206c8e1552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e4:0f:3a:6f:22:4f:ae:47:97:1d:41:75:18:48:1a:71:75:
34:0d:23:8d:7c:88:bf:1e:b6:31:db:e4:e2:fc:9a:8c:30:3b:
d6:38:fb:84:82:98:28:7e:c9:36:66:20:ff:b6:c3:8e:ab:ce:
8e:a6:ef:b4:b6:8b:30:7a:1b:ad:32:68:13:0a:91:1f:83:1a:
eb:d5:96:b3:26:80:32:72:6b:8f:e4:57:49:f9:a0:e0:78:58:
b1:45:fc:6e:4e:bc:a3:7f:b4:0e:00:16:41:10:a5:c4:b8:4a:
63:b8:31:7a:5e:86:ec:ca:ee:ad:de:f0:1f:7b:d4:ef:54:7b:
f1:2e:35:1c:97:c2:49:86:2e:b9:06:b1:ce:7a:0a:ed:ec:64:
cd:26:dc:3f:a4:e5:3c:83:5d:72:aa:1b:58:64:1e:f3:90:90:
57:21:c5:9f:7f:15:27:7b:2d:cd:75:01:15:d7:7f:c5:30:8a:
8a:10:5a:bf:e0:e1:77:45:58:5d:ce:31:01:e5:97:bb:e9:fe:
22:a5:b9:be:9e:d5:82:12:58:3e:83:a4:6a:67:49:40:b3:c4:
13:21:37:37:7b:47:14:2b:dc:7e:e7:95:50:83:b7:57:ce:8f:
a9:94:0a:10:ad:9c:06:b6:69:0b:f3:20:90:4b:0b:68:9c:90:
83:96:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:08:49 2026 by rpki-client