
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
File: 224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa (raw, json)
Hash identifier: YDWaGu38WOE1lK5VZ87RV1LkgUSDpW9aaVuPsP0fBJ4=
Subject key identifier: 13:CE:9D:80:17:52:85:2E:06:0A:9B:F6:2A:98:C4:6F:05:00:84:A2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA7878BF1AC747132B4004C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397212
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:8b:f1:ac:74:71:32:b4:00:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a55f8112-c97e-4107-ae40-1d7b6a54349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:e2:4c:a7:72:be:02:66:8a:3c:15:cb:d9:
8c:2c:c3:72:00:ac:6d:f9:53:61:a7:a9:69:23:3f:
37:b1:fa:ba:bb:f5:09:98:fa:cb:17:52:a5:ad:4c:
45:6b:6d:ec:1c:62:d1:6d:08:f5:46:96:bd:8b:3e:
99:dc:f9:62:d9:b7:c9:8d:37:ca:49:9f:bb:1f:6e:
68:5d:ce:32:7e:3d:a0:3d:a1:44:0b:95:ec:68:35:
36:32:77:70:df:cd:45:0e:b5:11:79:79:3f:33:69:
4d:e4:2a:2e:a9:3b:56:e3:9d:f9:2d:c7:a4:cc:d9:
88:69:3d:74:67:29:b2:7e:16:60:0c:76:12:09:c6:
c1:6d:7d:d0:3d:24:81:60:57:cc:02:77:e2:59:b5:
a4:49:e0:78:59:95:58:69:2c:a8:a8:b1:6e:94:79:
e9:41:74:3e:52:dd:46:26:25:2d:bb:21:81:2e:a7:
f2:f3:72:06:f0:d7:6e:4b:8d:1f:44:fc:6b:54:d4:
6e:d5:43:68:34:71:1f:f0:30:2a:35:fc:88:80:9e:
45:e0:b9:ba:7b:e4:4f:ad:e1:78:74:a2:a5:01:30:
2d:c0:3a:9b:91:3b:a9:bc:99:80:f1:9f:f9:cc:11:
42:08:04:d8:f4:89:0f:d8:a5:69:d9:58:f9:24:32:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:9D:80:17:52:85:2E:06:0A:9B:F6:2A:98:C4:6F:05:00:84:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c0b66-0bd6-3d5d-8f03-902cce3fc902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e9:e0:31:9b:2e:44:ff:00:ae:78:1a:02:21:c8:c9:45:8b:
52:b3:d8:22:75:f3:d0:89:8c:be:c2:89:57:49:58:7f:ad:34:
02:3e:56:79:6c:09:68:2e:9f:66:aa:46:b1:81:2a:70:02:15:
4a:18:12:b5:52:89:80:78:30:3b:17:98:ff:3f:b8:62:60:26:
e7:85:34:eb:41:e3:a2:41:79:7c:b7:02:f2:ec:46:8e:e8:68:
f7:99:f8:00:a0:a4:fc:ef:53:85:9b:a1:13:78:f2:91:57:c4:
2a:0a:bf:f5:6a:3e:3d:c0:f6:cf:e2:e7:33:85:9b:6d:45:42:
1c:54:06:ae:b4:b8:39:8e:94:cf:27:64:7d:a5:1e:f0:04:dc:
bd:3d:c5:5a:f7:0f:73:79:57:a1:96:00:51:95:32:f0:60:1b:
ad:80:d8:54:c7:32:7a:82:a9:52:1e:7b:15:c1:0b:10:0a:e3:
bc:cb:7f:44:b4:7b:ea:b2:45:04:03:55:d9:b0:b2:02:05:af:
8a:16:dc:98:68:6c:80:d9:32:78:1c:06:cf:25:d8:ae:cd:ca:
2f:8e:ef:a4:a0:93:67:79:c7:db:d3:39:de:a3:51:4e:1d:6f:
87:da:0f:1c:42:fb:2b:01:a0:92:f2:0a:fb:93:f6:10:f1:de:
0a:ab:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:04:13 2026 by rpki-client