
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec522d0-e4b5-3961-abc9-d13dd5e4d873.roa
File: 3ec522d0-e4b5-3961-abc9-d13dd5e4d873.roa (raw, json)
Hash identifier: +OpdgsTMIuCk+DzECxB2KAiqMqDyzWaA1Pi94RP5J8M=
Subject key identifier: 73:73:F7:86:93:2D:C7:0E:AD:21:C2:6A:E7:2B:79:0B:CC:AB:84:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49739611366C4D2A264E0B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec522d0-e4b5-3961-abc9-d13dd5e4d873.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36624
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:96:11:36:6c:4d:2a:26:4e:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=45ec156c-bc9f-411f-8047-5142876ef126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:37:c1:27:68:9b:c4:43:12:b8:93:a1:de:
fa:31:f1:38:30:12:3e:26:fd:17:10:52:32:ad:9c:
db:2f:f5:5a:ea:ef:eb:6c:18:e2:8d:e0:82:e4:bd:
10:f8:76:5f:a6:48:3b:38:72:2c:5f:af:fb:cb:e8:
05:c8:32:26:fd:df:97:e2:f1:a7:96:35:e3:b9:86:
5a:41:70:d1:5e:3e:dc:3d:cb:81:ed:36:17:10:37:
65:2e:1d:54:f6:b4:03:94:39:da:10:14:63:85:72:
0c:83:72:04:56:f8:6f:88:a4:c4:d8:b8:60:26:8d:
b2:52:96:c9:14:47:85:6d:fb:b6:10:f9:33:9c:5c:
ee:0d:b2:dc:a8:b5:c3:d2:c4:a1:94:4a:85:70:dc:
e5:bc:94:79:01:2b:61:50:ed:6a:3e:76:03:23:ff:
97:03:90:dd:85:bb:59:19:a4:28:8d:a8:62:92:9d:
12:c9:62:10:18:e6:fb:a5:3b:e4:e2:b5:fe:11:81:
4e:f9:3b:92:51:41:31:71:db:ba:45:f9:5a:ee:e3:
5a:77:ff:02:22:fd:bd:c1:af:46:51:08:65:bb:cd:
26:c5:14:49:0d:a2:57:1d:32:37:b9:d7:f0:bc:c6:
4b:c0:02:fd:3b:46:f7:95:43:f1:68:9a:ba:e9:bf:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:F7:86:93:2D:C7:0E:AD:21:C2:6A:E7:2B:79:0B:CC:AB:84:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec522d0-e4b5-3961-abc9-d13dd5e4d873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:54:44:5a:ad:d5:74:28:0b:ad:30:fe:cc:6f:6e:36:75:50:
24:18:6f:4b:ec:12:da:60:14:40:e0:13:b2:0a:12:27:79:1a:
5f:f1:20:91:ab:43:0b:14:f3:82:3c:17:d4:d6:85:68:a1:d9:
d8:d5:30:69:e7:b5:2b:cf:e5:60:a8:a2:16:3f:97:84:a3:d0:
06:c3:99:13:4c:41:52:8c:cb:f8:e5:61:04:c3:4b:73:d1:65:
83:0d:d4:6f:99:48:af:de:45:8b:59:29:87:dd:7c:fa:c6:5e:
14:47:00:c4:02:51:56:dc:7b:ce:37:42:53:f7:a4:14:8c:1e:
23:81:0b:52:48:77:5b:f5:8e:ff:42:41:f5:81:c3:84:a0:1e:
cc:14:d8:4b:04:e5:48:94:1c:1c:fc:ef:b5:b6:e9:7f:09:5c:
40:2d:fb:58:3c:cd:30:39:1a:a6:21:15:a9:49:9d:98:be:8a:
28:8d:8d:f4:55:4f:c8:f5:16:ef:ce:e6:66:91:3a:5c:65:6c:
c4:5c:a2:11:55:04:e4:1a:fe:89:04:6c:98:b0:42:95:5f:81:
e7:99:08:e1:25:1c:3f:e3:75:e6:23:af:63:c8:97:6c:4c:d1:
c2:d2:7c:ad:53:a8:ad:7c:2f:99:7f:59:a3:6e:33:de:63:b4:
7f:da:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:11:51 2026 by rpki-client