
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa
File: 28af308b-f981-38a8-9259-54549363d62d.roa (raw, json)
Hash identifier: tqiIlwhbKVd4n8IncY812NLiMSIJnNZxLrDNCjcwCb8=
Subject key identifier: 3E:94:36:F2:D3:7E:B3:DD:95:DF:4C:1C:E7:86:30:3A:D0:93:76:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EBB11C89AAC3E6ABE4CF55740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 40717
IP address blocks: 2001:500:127::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:c8:9a:ac:3e:6a:be:4c:f5:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=a527bb20-73a5-4af5-90fc-e0bcdf7082a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:6c:cf:5e:13:ce:6e:75:a6:81:62:4e:76:
c9:2d:a5:10:c6:ac:3b:42:64:4d:91:f0:80:6f:8e:
a5:b2:ef:b0:30:f3:27:ee:bd:2b:35:83:b8:fb:eb:
82:65:87:0f:d0:75:21:ad:5c:12:a2:2c:a7:86:fa:
b0:30:6a:92:f1:e5:78:61:b0:78:77:61:a5:5c:59:
0e:de:83:b6:98:12:a8:6f:b5:56:81:be:b3:66:9a:
88:b7:57:38:ee:01:b3:08:9a:aa:50:58:31:c3:4a:
e1:1b:68:19:29:d8:ba:02:94:0c:94:ad:af:c4:7c:
c4:85:5a:fb:df:f7:08:7b:34:22:81:c6:0f:ad:14:
a2:f3:40:28:1e:4c:b8:9f:d5:72:20:1a:c6:63:b4:
1b:ca:79:02:74:6f:f5:ab:b3:70:35:cb:03:5e:77:
7f:23:08:c9:73:fc:eb:55:52:39:b7:2f:9f:16:e3:
2b:70:f7:73:ae:ba:03:56:f9:ff:70:83:62:f0:92:
cd:97:62:5e:11:a6:ae:d4:7f:c0:bb:47:d8:bb:b0:
47:ff:4a:fe:01:4c:a0:0e:ac:20:59:b7:59:5f:77:
66:76:70:17:72:e6:e0:61:fb:59:ce:88:64:d8:ac:
6e:e4:23:4b:e9:e5:7b:d4:fe:1f:1c:23:05:d1:72:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:36:F2:D3:7E:B3:DD:95:DF:4C:1C:E7:86:30:3A:D0:93:76:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:56:08:6a:e5:68:10:43:bb:ef:bc:48:ba:72:7a:61:30:bf:
1e:01:eb:34:72:65:0f:46:37:6a:eb:30:6f:8a:7e:2f:e4:6d:
d3:d0:60:d2:bd:cf:4e:7a:b0:ad:31:99:b2:8e:a3:6a:79:9b:
56:d0:78:62:22:61:ac:8f:c3:5a:f0:b8:b0:cb:3b:47:f0:26:
96:f8:ce:3c:e8:97:bb:fc:e1:03:8b:d4:ed:16:c1:49:ab:19:
2b:fd:a1:ba:f0:f9:91:43:ec:10:fc:0d:da:83:de:04:a0:46:
71:68:a4:cc:2e:6e:d0:dd:7c:5b:0d:b2:9f:13:da:20:f1:19:
b7:a1:22:33:20:e0:81:bd:d1:6f:0f:50:3a:44:2d:8f:91:da:
b6:73:1f:80:ce:37:fe:a4:a3:8a:9c:a7:83:c2:22:ba:d7:41:
28:a8:6d:83:e1:51:e0:20:37:ee:cc:4c:db:87:09:0c:64:4c:
38:90:3a:96:23:ba:c3:e8:ed:46:6f:50:77:ec:b8:24:52:5e:
c7:65:34:a0:1a:44:bd:06:6d:a0:5d:36:78:d9:c6:a7:a9:ce:
b4:48:27:6d:8e:f0:4d:69:f3:54:aa:48:19:ea:be:4e:03:bc:
b9:1d:2e:c3:ed:0d:b0:6b:de:23:9f:e7:92:eb:e8:e6:5c:12:
0d:14:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:09 2026 by rpki-client