
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a4d63f1-346c-3fba-9731-8dc104e75372.roa
File: 1a4d63f1-346c-3fba-9731-8dc104e75372.roa (raw, json)
Hash identifier: ePe473I4g31abNJkVAUTq6zqySHIKzVROnaV9xnuxtc=
Subject key identifier: 59:A8:17:00:61:FD:F3:97:6E:4E:6F:14:95:8C:92:76:12:DE:49:A1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA793EBF1D4C4AE0F48D00280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a4d63f1-346c-3fba-9731-8dc104e75372.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396603
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:eb:f1:d4:c4:ae:0f:48:d0:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ea6dd345-a168-4a27-b4f7-ef3cf9755af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:16:71:0a:3c:7d:94:29:5b:29:43:7b:17:
87:2a:b2:39:9f:4b:da:7a:80:31:ba:4d:e8:cd:85:
b3:15:1c:34:62:e4:83:26:46:d2:7a:72:0a:65:32:
ff:9a:1f:7e:ab:e5:5d:72:04:06:63:e1:c6:75:6a:
72:f4:a4:0d:38:3c:d8:ed:fe:df:d8:00:b3:1f:bc:
a1:41:de:9b:bc:bd:89:48:43:5b:9a:0a:9f:b6:26:
fd:5f:d6:16:0d:38:fe:b4:7b:a1:02:6f:f9:48:49:
8c:47:4d:fc:53:45:cb:db:00:d3:aa:50:35:3b:17:
44:00:15:96:c3:86:37:0d:61:7c:29:55:02:a2:18:
a9:86:39:dd:e8:40:c4:38:d8:81:88:93:e1:e9:7b:
9f:06:f0:d3:f3:27:ef:08:e5:94:b9:b8:f4:45:bc:
09:6e:0c:18:e7:9a:d1:8e:53:b2:fc:f4:7a:08:07:
0d:f2:38:e1:da:9b:5e:bd:1a:34:50:30:d0:9f:ac:
c6:87:d4:13:fa:49:f6:5f:64:b4:7e:7f:93:62:78:
8d:89:ac:62:f1:db:0b:6e:c2:16:06:30:a5:d5:2d:
b7:40:ea:e6:d7:25:95:7e:73:f2:92:77:28:b5:4a:
78:ac:af:08:ce:2c:b8:b0:6b:a6:29:af:cb:52:82:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:17:00:61:FD:F3:97:6E:4E:6F:14:95:8C:92:76:12:DE:49:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a4d63f1-346c-3fba-9731-8dc104e75372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:3f:a9:28:32:fe:66:6d:a6:67:db:56:63:ec:1d:bb:44:fd:
3a:1d:c7:e9:0c:dd:08:61:3d:8f:a3:23:69:5f:72:0d:57:5d:
36:69:da:0e:5e:cd:8c:cf:62:39:54:47:c3:c5:36:3f:b8:37:
11:68:b1:88:8c:70:04:7e:45:92:d0:7f:20:b5:2f:4d:ba:e6:
30:21:76:05:35:1b:9c:42:2a:c8:b3:66:d1:a5:3e:1d:0f:e2:
d9:8b:04:fe:e7:39:d4:e0:58:5a:37:6f:b3:92:90:7b:51:59:
2c:d9:a3:be:f8:8e:3e:64:f5:08:2f:8f:5d:1f:90:fc:af:e2:
39:25:73:c1:99:ed:e5:b8:01:85:c2:1b:ff:18:de:4a:6f:0c:
7b:43:8c:75:6b:89:7e:ba:6a:1c:b5:be:ef:1f:c8:54:e2:e1:
ac:e3:23:0c:f8:1b:82:cd:96:3d:49:6f:5b:c7:92:0f:de:0b:
b4:7c:c8:14:64:d7:4a:75:5b:14:88:04:fe:c9:19:39:df:8d:
52:53:24:02:c4:0f:da:c3:90:09:28:7a:10:05:72:10:82:45:
66:3c:34:8b:e0:98:79:ab:f0:a3:3b:ac:cd:d7:4f:c1:16:63:
0f:53:d7:af:d3:f8:59:49:ef:98:a5:c4:23:79:02:ce:af:91:
b9:e5:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:21 2026 by rpki-client