
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409c79df-90fc-3f4b-8cea-1848476f1444.roa
File: 409c79df-90fc-3f4b-8cea-1848476f1444.roa (raw, json)
Hash identifier: Nd4bOP7GPkWY76tTW9jZ6Wy1Po0tWqSt0l3oY8iNb8o=
Subject key identifier: B7:B4:BA:F0:AC:83:30:FD:A7:B1:E4:59:01:C1:80:55:53:8C:EF:E7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549D5E7718D1F7EF685E62C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409c79df-90fc-3f4b-8cea-1848476f1444.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396552
IP address blocks: 2001:503:d2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:5e:77:18:d1:f7:ef:68:5e:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=a8f82b90-b25e-434e-b6bb-2c2dd5e00af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:7c:83:ab:19:40:4b:10:29:62:4c:6a:2b:
fa:b9:4e:08:41:57:00:62:d2:a1:54:0f:ba:f7:49:
82:d8:1b:21:27:a2:9a:a4:5b:d4:cc:4b:eb:89:23:
a4:e0:96:f1:1d:02:b3:be:be:75:4b:e2:49:4d:b3:
65:44:b0:ba:23:49:f9:30:3d:e7:aa:e9:9f:bb:2c:
0f:cb:1f:19:aa:fc:14:dc:47:d2:a9:9c:29:6e:60:
2f:19:91:75:7e:ec:df:5f:51:f7:e9:af:cf:66:c7:
11:df:3e:c0:26:24:33:e4:69:4c:08:95:78:79:a9:
a4:08:d2:2f:ec:9e:68:14:e1:72:91:0b:20:06:f4:
de:da:b0:8e:08:43:45:42:2a:45:cd:d9:a0:6f:a8:
44:61:57:cc:f1:ab:4e:a6:0c:d6:26:88:b5:be:9a:
b9:45:ca:3b:b6:6e:78:7c:00:90:da:2e:18:e3:0f:
e0:39:af:ce:12:6d:48:1b:62:27:87:3f:30:df:27:
2c:eb:ab:44:20:d9:22:4f:1d:b1:2b:99:35:47:9a:
dd:b7:3d:5b:35:8f:b5:53:48:c4:de:9f:23:a2:2a:
58:dd:ca:e0:b7:5e:6c:d8:45:e1:d0:ee:3b:fd:68:
37:ff:30:17:0f:ff:93:9e:7d:bc:eb:8d:48:4b:74:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:BA:F0:AC:83:30:FD:A7:B1:E4:59:01:C1:80:55:53:8C:EF:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409c79df-90fc-3f4b-8cea-1848476f1444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:52:19:69:7c:37:c7:eb:6b:b5:67:41:7e:1c:1b:a6:53:d6:
b7:4b:23:fc:84:3d:d9:b0:cf:fc:79:80:49:46:cf:9a:6f:c9:
ef:35:1d:c6:47:38:99:d9:7a:69:3d:30:a4:d5:33:ff:2e:0c:
df:90:17:19:f8:82:d3:ec:41:6a:04:5a:83:d2:d5:5f:e3:5d:
14:a8:6e:ff:09:ca:e0:e0:1a:e0:65:4e:ba:51:66:43:a5:77:
07:d0:40:3b:96:cb:22:01:c7:f8:58:41:ab:cd:f3:bb:f4:67:
1c:23:38:27:5a:8a:e1:81:a7:e7:11:69:1a:5e:0d:4a:fc:a2:
85:e3:09:9a:4e:28:3b:8f:a0:e2:66:bb:76:84:ac:90:0b:e5:
da:39:55:73:2b:54:ba:96:42:a4:2b:47:9f:e2:48:2d:71:88:
41:7e:2a:0f:b9:1b:f1:1c:29:5e:00:cc:3c:7f:b5:ab:3f:0e:
d6:d7:7b:2f:3d:8f:e3:aa:75:92:28:3b:ad:5e:9b:c1:30:1a:
b7:69:87:75:fd:d3:5a:af:a7:9f:09:c5:e2:a8:e6:5e:fa:f5:
92:31:0c:33:fd:89:19:4d:be:0b:f3:b1:50:a6:b3:7f:a2:61:
ff:10:3b:c9:44:76:3e:f7:06:1a:b5:10:42:9d:1f:8d:30:51:
c6:0a:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:17:15 2026 by rpki-client