
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa
File: 20e17f2e-bf76-3f84-968d-dc8984797231.roa (raw, json)
Hash identifier: PJQFbkFmQGyWdY9rXiQ6/PCAPpaAqIjBV6eVKxznb7w=
Subject key identifier: 52:32:B8:81:7F:92:D1:F9:15:6D:B1:D3:25:92:B7:91:42:2F:00:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F66C2B7CF50DD53BD5C7C9740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 396564
IP address blocks: 2001:502:cbe4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:b7:cf:50:dd:53:bd:5c:7c:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=77ce0839-ec3a-4b17-9d59-253ed6858373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:4d:e7:4e:e5:22:a3:15:8c:bf:1a:5b:b9:
41:88:b9:90:42:e7:81:02:a4:b9:58:3a:53:b3:ef:
a0:6b:cb:24:23:ef:31:40:19:5f:5c:25:ed:65:88:
76:b5:7f:37:3e:8e:01:34:6d:9b:67:8f:85:f2:9c:
ee:ae:bc:4a:dd:70:48:41:1e:3c:c0:4b:c6:5d:9b:
25:49:e3:61:3c:1a:68:07:82:b6:a0:6c:ef:6e:d9:
e2:32:1f:ef:2e:b0:63:2d:16:dd:e8:19:d8:f8:f1:
b9:b3:ea:a6:ce:6e:56:04:d8:61:b3:ad:36:0e:ee:
23:e0:1c:70:eb:c9:bb:4e:07:58:ba:a3:d1:ad:3a:
3a:cb:52:d3:9e:0b:31:48:ad:c6:dd:68:b4:77:cb:
5a:a3:bb:9d:9f:09:42:ac:85:1e:0d:c6:0c:e4:4a:
30:e0:c4:21:bb:a4:53:3b:75:ab:63:91:c8:ee:40:
49:db:b6:fb:15:08:f1:86:47:f0:89:fb:60:ab:15:
98:4b:48:bf:b5:38:12:09:15:d1:18:4b:9d:59:cc:
86:a4:f0:2b:0a:cd:bf:b3:07:d7:6e:b5:81:61:47:
c8:78:63:d5:e3:b1:50:fd:3c:cf:50:c5:db:47:d4:
1a:16:1f:f7:f9:03:66:e4:2f:c7:fc:c1:2b:90:84:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:B8:81:7F:92:D1:F9:15:6D:B1:D3:25:92:B7:91:42:2F:00:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:25:ef:aa:3c:4d:d0:84:82:02:18:b8:3d:81:b4:08:9b:08:
0b:8d:a5:80:15:10:15:f4:01:b9:9e:56:6b:7e:8c:6d:49:38:
29:f0:59:d7:54:e3:70:f2:c1:b2:76:46:0b:56:13:60:bd:c7:
60:69:39:33:66:1f:e4:8c:24:4f:6b:40:1b:bb:45:71:fa:9c:
0d:84:32:0b:94:a8:7b:fe:e0:4e:0e:84:19:1f:c7:a2:8b:fd:
b9:6b:38:d9:9f:1a:36:ee:5a:5d:c7:86:da:c3:e3:d2:81:ef:
fb:ff:c3:8e:4b:c2:fc:cb:41:b1:45:bb:f8:f7:e3:2f:95:9b:
92:83:04:e8:4e:93:95:03:5b:ce:8d:70:0c:f3:db:e4:78:e6:
71:84:0e:9a:31:2c:93:75:f8:a9:56:cb:c7:e8:9d:f7:9e:22:
33:0e:bd:d5:d9:83:eb:12:c4:5e:65:a9:73:04:61:bd:3f:91:
51:ca:49:30:d0:11:6a:3f:69:87:12:b4:a5:53:ea:76:b9:fb:
8a:93:f3:e1:05:ce:13:32:87:c4:71:88:21:fc:96:e9:0b:90:
ae:72:19:42:2d:30:79:eb:5a:a9:6f:55:ca:1f:c7:a9:ba:cc:
20:fa:fe:58:29:89:1b:a7:fb:64:ad:2e:e0:bf:b9:35:ea:b6:
7b:2d:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:11:56 2026 by rpki-client