
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
File: 2540f0e5-e598-387e-8a57-df9fb42db048.roa (raw, json)
Hash identifier: IbS8xeZUEnfOMezSxjvMR05a9C72MGK6oajENyY8BMQ=
Subject key identifier: 30:9D:01:FF:99:08:C9:9F:9B:8F:2A:72:A5:12:43:89:F4:EC:EE:39
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F5768195C1DFC89E239BE7440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 36621
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:19:5c:1d:fc:89:e2:39:be:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=6542a04f-3bf4-4e81-bc50-9ed3afa763ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:b4:0d:e4:f5:e1:db:21:35:0c:07:04:1e:
8e:9b:5e:9e:a0:76:dc:58:b0:49:f5:68:f4:5a:57:
78:a4:68:fd:0e:1b:e9:09:03:99:22:37:9d:1d:1d:
fd:1a:2a:e5:e5:b7:ae:4d:00:37:5e:99:17:d2:fd:
9d:d4:ee:60:5b:75:51:9e:e9:f0:24:69:1d:53:35:
5a:59:d6:4f:9b:8e:f2:19:6f:f8:f4:78:6c:70:7c:
f4:3c:65:b7:49:b1:af:f5:6b:31:c1:32:43:69:20:
fd:b2:2a:0e:4c:92:b4:28:4a:0e:bc:b9:f3:7c:7e:
66:59:7e:58:af:41:f0:ef:c5:47:43:31:9b:52:ee:
ea:46:7d:7e:8f:83:a0:ec:9d:0f:af:eb:1c:21:89:
3d:62:50:88:42:9d:42:c2:a3:8f:c4:bd:84:99:e8:
08:1a:58:86:33:5d:c5:b5:07:f4:32:82:dd:4e:2c:
cb:13:a2:4b:6f:9f:f2:45:8d:c4:6a:44:ee:dd:eb:
d3:23:0c:bd:7f:2b:c4:b0:78:eb:d6:26:07:7a:ad:
2c:33:44:d3:47:4d:c9:e8:00:3a:f0:3a:bd:f4:e6:
49:ac:5d:07:b4:7a:84:b9:d8:b0:7a:2f:69:fa:33:
1f:d0:47:17:2b:04:26:d6:78:b5:d8:e5:89:aa:eb:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:01:FF:99:08:C9:9F:9B:8F:2A:72:A5:12:43:89:F4:EC:EE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:9d:69:88:8e:05:52:43:91:29:76:f7:38:bf:0e:8e:82:91:
18:98:95:bf:0f:7b:c7:66:56:d2:c0:a5:a8:fd:df:0c:19:73:
b7:7b:eb:fc:24:55:93:09:8d:72:7b:05:9c:f0:06:3d:bc:f5:
2f:ee:c7:64:06:ea:88:0d:37:47:3a:58:dc:24:d5:74:bc:bc:
a3:09:47:e5:dc:08:b7:fb:2a:dd:8b:79:81:ae:da:7e:ae:1f:
b1:d5:2c:b1:84:20:c8:19:7a:4d:09:72:e5:fb:39:29:a9:c7:
18:ff:c0:3b:55:60:2a:c8:a6:73:a0:32:e6:24:85:77:a3:7b:
49:63:94:b2:2f:13:51:78:fb:d8:2d:6d:aa:04:67:6c:94:82:
48:8d:94:4b:66:a2:4b:d3:9e:a7:ad:32:9c:4e:82:ba:a0:df:
ed:f4:da:0c:3b:c1:5a:48:ef:6d:18:d3:bd:a4:01:3e:a9:77:
22:46:9c:ab:77:74:b2:0d:b2:dd:2f:9a:4f:49:39:19:a6:b9:
a3:20:d7:84:d4:a4:5b:ad:93:58:92:59:d1:90:67:22:44:96:
f1:e9:97:04:d6:0a:28:e6:cc:bc:65:06:11:9a:39:8b:a1:ab:
48:aa:57:83:8b:aa:2a:5f:b2:3c:43:a0:a5:f6:1f:6a:2e:72:
d9:0b:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:30:49 2026 by rpki-client