
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa
File: 2c67f318-9c9e-3cd3-bad0-913e1263503a.roa (raw, json)
Hash identifier: nYOVgVejApIc6fDW2WK1Ik88bq8uSMMuzUeQj4mFiCw=
Subject key identifier: 09:FB:BE:DA:AE:90:55:28:4A:75:57:89:AB:05:D9:40:81:43:C3:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA793F64CADBE60AE04AF41A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396541
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:f6:4c:ad:be:60:ae:04:af:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6954ac50-825d-4e75-8136-2c7036c1eaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:06:98:f2:4c:5b:b1:8f:bf:cd:ea:54:43:
3f:16:8f:ef:3e:33:ec:8b:ca:66:ad:b4:b8:dc:a7:
34:c3:05:4d:a6:b9:0d:73:ad:30:b4:4a:ca:69:c3:
c3:95:dd:c8:64:65:ae:83:ce:75:3e:60:d8:9d:21:
90:8a:b1:cd:69:87:a7:1a:c0:35:94:f0:fa:96:7d:
bd:d1:6d:3b:27:01:62:6c:6e:97:62:67:11:50:0b:
c1:45:cf:55:31:27:07:7a:fe:39:46:38:46:be:5e:
f8:eb:af:55:f2:92:c1:e2:bd:60:46:7c:ff:9a:14:
1e:1f:77:b6:78:dc:df:fb:1d:a2:4b:4b:61:a0:54:
0e:7f:f1:92:47:58:15:e9:1e:41:01:d7:15:bc:48:
af:42:58:43:ad:df:c8:87:d5:93:c6:47:a0:82:46:
f5:97:cc:c7:72:32:c3:5c:63:64:ee:e2:fd:c4:09:
0a:1c:ee:da:27:09:1e:58:08:85:1e:f2:75:00:0b:
74:30:2e:5c:74:d5:4a:95:42:e6:d8:ed:28:84:37:
43:86:99:aa:ec:6a:17:c2:4d:ff:cb:b6:31:c0:81:
c0:e1:a4:b7:c4:06:6e:74:ea:22:b0:4c:d2:bc:70:
df:4c:56:b2:c4:b7:15:59:55:df:6d:20:54:ef:1b:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:BE:DA:AE:90:55:28:4A:75:57:89:AB:05:D9:40:81:43:C3:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:45:c3:d2:56:d9:3b:0f:0e:ff:19:b2:ad:06:56:22:32:63:
8d:ca:a6:00:63:37:81:98:aa:9a:4b:d3:ce:31:ce:99:f1:9a:
9b:3f:5b:6c:f8:58:51:a6:c1:3b:bf:45:97:56:66:3a:2f:1a:
74:04:6f:e3:65:e6:28:72:d2:77:80:9f:92:db:f3:d9:82:b1:
83:5b:f8:0e:b4:a4:36:c1:99:d4:28:8c:bb:15:f2:b6:6a:a1:
f6:eb:de:24:3a:9c:a4:c8:f6:4b:04:8d:74:aa:f2:5d:24:0c:
fa:ea:76:03:13:16:45:17:9e:0f:bb:8a:f8:f2:1c:03:d0:d2:
1a:d8:10:75:11:45:d4:48:02:44:e8:42:0f:d1:82:aa:5e:d0:
59:12:6b:e4:ae:7a:c6:d9:b9:fb:15:b0:5a:35:9f:b4:56:ed:
91:82:15:a5:b7:3d:b5:cf:ee:8e:67:8b:16:cd:70:7a:11:1e:
92:0a:7f:c8:9f:b8:cf:31:a8:4e:0a:b3:af:12:d7:11:a8:94:
6a:93:7b:4f:76:03:a2:15:c1:16:7b:8d:97:1e:bb:17:20:61:
46:47:9f:ba:22:9c:2b:fe:a7:29:17:c1:7a:6f:d8:53:1b:ac:
b5:40:4e:e7:7d:8f:c5:90:d6:3d:e0:d0:73:4f:8d:55:67:00:
1a:fe:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:28:40 2026 by rpki-client