
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa
File: 3caf627e-f520-30d0-af6f-c5a07013dd67.roa (raw, json)
Hash identifier: 6+KAR0DJtBYZSYn03cnBPUUyf7o1o2E8R8mDKGJEXZ8=
Subject key identifier: 39:C2:45:3D:49:2F:F4:48:69:2D:B5:84:3C:21:FD:7F:53:9E:F7:FE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A714746BFB0D706B959EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 396543
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:14:74:6b:fb:0d:70:6b:95:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=74c918eb-3a41-4b2e-9ce5-dbe6c23ec38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:d2:55:ec:b7:b4:e2:18:4a:e6:a6:dd:1f:
ba:7c:68:fa:ac:28:12:92:bd:fe:e0:bf:d3:30:cd:
9a:ef:82:3c:5a:d2:3f:0d:4a:1a:0a:23:f1:04:0d:
1b:a6:d4:c0:ec:d2:55:1d:a3:47:5e:5d:fb:a5:a1:
29:85:9c:f6:6a:d2:e4:03:fc:43:cb:8f:0f:6f:c2:
aa:8f:f3:0d:72:33:85:67:2a:2c:e9:e4:01:6b:1e:
f5:dc:5d:29:67:61:75:e7:d9:94:dc:0e:fc:95:f1:
49:a9:c0:10:2a:b8:25:5e:df:7a:c0:a0:03:eb:ad:
dd:93:99:21:fe:11:fd:3e:6f:d4:e2:b1:c7:a3:72:
3a:f4:98:85:9d:93:ed:35:ae:4b:03:01:7b:1b:3d:
12:c1:b3:5e:c9:8d:ae:bd:3b:0e:60:d9:dd:6c:67:
ca:b6:83:46:4e:a5:25:56:e2:74:c0:13:d5:01:35:
c8:b7:89:71:13:99:2c:42:a3:43:5c:c2:2b:bb:28:
71:fa:70:e8:c4:8a:93:68:5d:84:04:a8:36:ad:50:
28:c0:d0:c0:11:e4:15:6a:9e:b1:61:37:cb:c1:76:
a5:4f:07:ef:8e:2f:85:4e:2b:a2:0b:43:99:6f:62:
a0:da:27:6f:44:b6:d8:3d:76:1a:1d:6f:95:3e:7c:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:45:3D:49:2F:F4:48:69:2D:B5:84:3C:21:FD:7F:53:9E:F7:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:23:11:cd:dc:b2:1e:5c:f7:cf:95:54:fc:ac:72:f3:15:ec:
77:bc:6c:3d:0b:87:34:a2:14:6f:d7:ea:7b:aa:6e:7b:c9:77:
f0:f9:b3:b9:6c:aa:22:73:7d:1d:7f:01:1e:8e:37:0f:a5:0f:
2a:67:bb:1e:dc:38:f0:83:0e:57:fa:1b:e4:d7:2d:f4:df:71:
d4:a0:95:6b:12:f6:56:a4:db:d4:10:0f:3d:a0:b1:7f:dc:ac:
10:6e:f0:62:9c:81:83:7e:88:47:10:18:ab:58:49:7e:d1:c7:
61:d8:56:55:2e:a9:13:25:8c:23:95:1d:db:d3:ce:db:f7:32:
50:32:c4:7b:29:88:9c:a9:b8:b5:f3:cd:1b:3f:5d:82:9e:ac:
01:ac:3a:ca:11:25:a9:6a:b9:9b:b7:c4:72:6a:93:4a:f3:1b:
1d:22:ed:90:8d:81:37:f4:5e:d1:62:6c:d1:2f:b8:0b:dc:e6:
54:4a:9e:db:b0:ea:dd:94:7b:c9:5e:9d:42:c6:ca:6d:8b:0c:
93:48:02:94:ff:2d:4b:63:a9:62:f9:6d:db:31:1b:92:2b:36:
68:98:2d:e3:0d:10:bf:ce:09:09:ea:24:b2:bf:eb:63:1f:9c:
3a:69:c1:37:59:ff:52:07:98:a2:04:28:94:6a:ce:0e:42:63:
74:a3:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:08:50 2026 by rpki-client