
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a238dbf-68ad-3293-a5a1-d2685b735549.roa
File: 3a238dbf-68ad-3293-a5a1-d2685b735549.roa (raw, json)
Hash identifier: EX9hEpQfU54izMdV4JUdV8uBppFPwBN8HmjT4ur78So=
Subject key identifier: C5:A7:3B:4C:DB:22:B6:4A:47:87:83:7E:60:D5:2B:5B:37:95:B3:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F57682CF2071941815B164200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a238dbf-68ad-3293-a5a1-d2685b735549.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 396602
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:2c:f2:07:19:41:81:5b:16:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=d89a1ba8-78d9-421b-b385-e4c98a22e843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:d3:27:0b:1a:2f:35:16:0f:4e:9e:46:05:
1f:8c:32:1d:61:11:68:f4:d8:30:7a:94:1e:59:c0:
09:eb:58:4a:2e:1d:9c:46:ae:fe:80:cd:5f:b0:ff:
b2:1a:9b:68:67:02:b0:20:a7:33:32:ff:c0:62:61:
fc:17:d3:3a:93:02:d8:31:61:a7:2e:3c:89:03:1e:
57:5e:4a:48:7b:28:99:fb:83:bd:97:f9:d6:97:13:
22:ee:ae:cd:94:f5:03:13:c3:84:c2:58:53:d7:1f:
a5:0e:54:c5:82:ff:d9:e4:00:d0:ea:24:2a:c6:73:
74:44:c4:9d:78:d3:c4:6d:df:35:4c:d6:b4:aa:16:
64:2a:5a:f0:81:6a:35:73:31:7f:18:4c:0e:97:e5:
a2:f1:1f:1e:3b:8c:20:6b:bd:a0:73:ab:b7:c5:7e:
c2:66:cd:a5:5e:88:e8:7b:ef:0d:32:ea:a0:cc:8f:
64:e3:11:dd:ae:80:fc:0f:51:a1:7f:79:be:3a:ca:
1b:90:38:d4:0c:d7:90:83:25:b3:f2:9b:a0:18:36:
40:00:3c:1c:57:be:98:99:2a:72:e6:a1:00:7a:60:
8f:9f:98:cf:e5:d4:0d:62:b3:50:66:9f:07:91:5b:
a4:37:1b:ba:d8:e7:7c:45:fe:03:42:77:01:00:fe:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:3B:4C:DB:22:B6:4A:47:87:83:7E:60:D5:2B:5B:37:95:B3:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a238dbf-68ad-3293-a5a1-d2685b735549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:d2:48:72:b4:70:b8:f2:d2:65:46:65:1d:87:c4:3f:5a:fa:
4d:5d:3f:1c:95:f3:08:7d:8d:f1:3b:81:7a:4a:fb:ef:40:b0:
72:18:5c:bc:28:8f:b3:ee:7c:4a:2d:b4:90:bd:36:e6:e9:3e:
76:aa:18:9f:23:10:06:7b:d7:59:34:ba:28:0b:79:bb:32:a1:
e0:df:db:7d:bc:17:7b:49:c0:cd:c9:f2:83:24:5c:b8:1f:99:
1f:62:05:31:9e:52:30:96:23:8c:21:79:6c:65:fe:18:83:23:
a9:36:7e:d6:00:4b:de:5d:3d:de:bb:0e:a6:51:81:ec:85:67:
80:0f:6e:1d:cd:1f:5e:28:b5:a5:ac:4a:fb:42:d7:e1:9a:fc:
56:9e:fd:9c:95:7b:63:1c:5f:28:14:54:c1:d6:3e:ed:55:b8:
79:bb:1d:18:00:27:cc:ee:cd:94:f6:9c:f0:c8:33:88:45:31:
50:97:6e:7c:04:05:a8:07:1c:f2:4c:44:d1:c7:5d:37:78:10:
db:a8:2d:2d:9f:e1:92:c3:40:74:88:9d:68:a5:26:14:8f:5b:
97:ea:0e:97:00:df:a8:3e:38:2e:a2:b5:19:77:8b:9a:e1:39:
d3:d3:0f:22:fc:f1:c3:54:bf:b6:96:ea:e0:da:13:64:fa:06:
1e:80:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:38:49 2026 by rpki-client