
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
File: 2540f0e5-e598-387e-8a57-df9fb42db048.roa (raw, json)
Hash identifier: 99QSq9UhPSMlTLC5WrNV7bQWJB5W/njkC+YP3WWCLkI=
Subject key identifier: DC:5B:13:EE:75:D7:91:4F:A9:B0:2F:F9:C0:FA:01:FC:CC:DA:83:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EB57C51575E7A8CE8E86EB300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
Signing time: Mon 03 Aug 2026 01:00:11 +0000
ROA not before: Mon 03 Aug 2026 01:00:11 +0000
ROA not after: Sun 01 Nov 2026 01:00:11 +0000
asID: 36621
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b5:7c:51:57:5e:7a:8c:e8:e8:6e:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 3 01:00:11 2026 GMT
Not After : Nov 1 01:00:11 2026 GMT
Subject: CN=4dac0909-8f70-4610-9be3-7f7f13314a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:40:f2:bb:b1:c3:9c:e2:6a:ed:c8:ce:47:
01:cf:e2:2b:f9:35:af:e3:6a:cc:bc:39:dc:94:e9:
a8:f6:32:ba:6f:8d:53:ba:94:87:0d:4d:15:a6:95:
36:be:f7:32:42:6e:5a:65:0c:2c:54:9e:36:bd:3d:
86:91:af:ff:60:e8:5e:d8:fd:3d:4c:4d:54:d6:6e:
d6:ee:68:4f:3e:f3:1c:31:de:9c:6b:ef:ce:d6:c5:
e1:82:ba:db:3f:3e:77:a5:43:33:ee:8a:60:c5:be:
e0:41:20:16:d0:e5:1f:90:c9:a3:f8:eb:16:14:e2:
87:3a:10:a7:22:0c:bc:bc:22:73:5d:40:97:9d:f4:
ba:3e:47:24:2d:3f:3a:79:a3:20:cb:7c:ae:91:69:
52:48:dd:d0:29:a5:06:96:58:35:bc:82:bf:cc:a4:
98:78:78:db:d8:25:4a:0a:56:0d:09:f0:80:ba:87:
c2:46:f1:88:6b:f4:e4:85:ba:c9:07:03:56:20:70:
42:8a:fe:12:db:73:82:b6:68:33:e7:32:76:1a:29:
ec:13:0b:1b:c4:69:4e:81:65:a6:2c:22:eb:b4:83:
d0:22:8c:6d:bb:6a:fa:0f:28:a0:29:18:fc:ba:0e:
90:a7:37:6d:a3:5c:c6:c9:a6:36:5e:58:84:48:2f:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:13:EE:75:D7:91:4F:A9:B0:2F:F9:C0:FA:01:FC:CC:DA:83:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2540f0e5-e598-387e-8a57-df9fb42db048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ea:e1:fe:43:72:d2:44:cb:08:05:0b:5d:1f:c9:96:da:2e:
7b:56:ac:ed:5e:90:d5:5b:59:8a:5d:9c:bd:32:59:b6:b5:40:
40:6c:d8:6f:69:57:36:31:ed:6c:cb:6c:cf:f6:43:38:55:f8:
56:36:36:32:3e:4a:72:4b:19:a8:31:2d:be:aa:b5:b5:db:2c:
5e:7f:e4:23:55:46:85:e5:8f:85:87:16:8d:cb:56:02:9c:0e:
eb:70:ad:5b:8a:a1:dc:b3:e2:c6:cf:5b:43:0c:8e:f0:70:c2:
b1:b5:27:82:0a:da:d3:b6:79:48:76:c2:0a:b1:57:42:e4:c5:
98:a2:77:7e:da:72:83:bc:e5:e2:fc:4a:60:6f:02:ec:9a:48:
7f:4d:ae:bb:da:0b:11:35:3a:b1:43:fc:9a:df:0f:db:c4:9a:
5c:8c:d2:2b:9a:2d:ff:89:35:b1:27:67:bb:42:eb:c7:bb:43:
34:c5:58:33:77:fb:2e:27:48:f8:6e:5a:21:ed:28:4c:cf:14:
28:63:27:12:a8:11:42:62:00:de:2c:a5:67:15:9e:89:1b:16:
96:d6:ae:d7:bf:f3:e4:38:e9:9b:90:79:4d:c5:db:6c:b7:d8:
5e:af:ad:63:59:73:73:6a:b5:3c:fe:39:6b:46:b0:3c:71:71:
06:ce:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:46 2026 by rpki-client