
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa
File: 21f43cd8-0619-3e19-a91e-35a11ef54f56.roa (raw, json)
Hash identifier: qiAlmrQDcwKhyeLSEvBIh8yQILnPb6OfKgTxQkwje1o=
Subject key identifier: 02:F1:9A:03:CD:5F:EB:5E:10:57:E7:6C:64:B2:E9:BD:5A:51:3A:E4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49880DC434C03F5255B7D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396617
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:0d:c4:34:c0:3f:52:55:b7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4f8d15ea-d37e-4fa0-b5c5-8019db6e58e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:59:a2:28:be:17:58:ff:18:3e:26:c1:13:
5e:d2:ff:07:fd:a8:b3:f5:c1:24:c8:b8:8c:d2:5e:
04:a1:74:aa:c0:7d:46:f0:d7:dd:77:72:f0:7f:01:
d9:a4:91:bd:9a:23:be:a2:1e:65:62:63:42:0e:af:
c7:a4:8c:f6:6b:93:43:f8:f8:17:9b:07:8f:01:7f:
61:65:ce:be:64:20:16:9f:6a:0e:50:de:d9:06:af:
dd:31:7b:cd:e1:a0:71:b0:df:6e:00:19:96:14:52:
a7:0d:8e:01:18:51:3b:be:8b:00:4a:dd:72:d6:07:
5d:2e:08:77:8d:e8:40:11:d1:95:3d:3e:6d:6e:4a:
60:c6:0e:72:ed:c1:e6:2f:b8:ff:d1:c1:55:6f:20:
d8:32:ff:f2:12:cf:3c:4d:ec:ec:be:d3:2b:b3:15:
b3:40:94:40:cd:19:07:5a:af:9f:d4:2d:56:7a:c4:
3e:95:c9:17:d6:fc:c0:82:17:17:03:93:db:23:16:
fa:0a:89:8a:da:e5:a4:d7:4d:7c:58:6d:2b:da:be:
fa:63:56:53:cf:b1:f1:7c:c9:d7:ef:3e:dc:c2:45:
1c:e4:99:44:7a:93:e6:fa:9d:fa:67:80:cd:b0:34:
1e:7f:eb:d5:7b:95:cc:81:fa:6b:43:f1:3a:8d:4b:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:9A:03:CD:5F:EB:5E:10:57:E7:6C:64:B2:E9:BD:5A:51:3A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:d0:b8:63:25:8b:fe:03:87:3f:e8:19:56:80:0f:69:90:1a:
51:96:c1:ae:e2:41:0f:b5:86:3e:51:4c:ae:b2:52:87:97:6c:
80:b9:3b:3a:04:bf:2a:d7:2a:e1:ab:21:b5:09:2d:1f:40:8f:
fd:87:b2:f8:5d:89:c6:94:2c:26:ca:cc:88:98:fb:6e:cd:23:
74:50:59:06:e5:9f:fd:86:32:38:4d:e3:14:65:30:ad:43:c5:
8d:39:e0:b3:a6:d8:e2:38:5f:a1:a4:f8:fa:b6:5d:a5:90:55:
a2:3e:75:af:08:24:31:bc:c6:6b:c6:5c:2a:33:0d:3c:e9:d0:
a6:23:de:9d:bd:aa:c9:e6:6d:dd:0b:44:89:57:72:16:76:35:
41:d6:5f:33:d4:48:58:16:96:5e:c0:a5:6b:fe:0a:07:1e:4f:
31:ba:9f:0b:ba:54:32:c4:1b:ca:6a:87:4f:e7:f7:80:af:bb:
b3:70:ee:2f:a9:0b:4b:22:17:e7:a2:3b:95:ce:b3:07:5e:e4:
7c:79:01:80:4a:32:e4:06:1e:4e:9c:5a:9d:72:74:0c:8d:66:
18:bc:98:cd:d4:aa:a3:08:11:f9:29:95:a3:30:a5:1b:c5:98:
e8:c8:e2:38:9c:91:b3:cf:97:3a:e3:09:4a:d8:50:7f:a6:0c:
5a:55:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:08:36 2026 by rpki-client