
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42f66111-2e58-313d-9743-dc4ccb03ea2f.roa
File: 42f66111-2e58-313d-9743-dc4ccb03ea2f.roa (raw, json)
Hash identifier: MymPlbq2K4h9Zc4BqCkKraRf+S4A8KSCwl0ibZh8DQc=
Subject key identifier: 37:3E:8F:65:44:A6:46:C4:8F:D4:A0:59:AD:DA:CE:AA:6B:F8:07:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4972BEAC43F09FE44D2F8390
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42f66111-2e58-313d-9743-dc4ccb03ea2f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396584
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:be:ac:43:f0:9f:e4:4d:2f:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c77a2809-aac8-4e25-8212-5276966dc968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:85:65:9b:e4:f9:c8:0c:6e:da:99:e2:4d:
23:15:8f:71:e0:a9:ef:28:36:66:be:a8:68:96:e7:
ee:47:2b:9c:dc:00:6d:6d:4f:98:c0:6a:c2:db:a4:
ae:7d:36:ce:ff:ec:28:b4:9b:94:86:06:d9:18:2a:
cc:f1:73:13:bb:c6:ab:4f:10:c1:b1:ff:67:68:11:
24:fe:7e:7f:2b:1c:bd:56:f0:0c:b8:64:8d:26:f5:
2e:19:ba:67:27:93:1f:73:12:09:f0:0b:4b:d6:16:
be:87:27:62:8e:37:9e:fb:44:0e:87:98:43:88:bb:
c9:55:5e:13:9b:1a:a8:3c:52:12:0a:a3:70:f7:ea:
7c:3a:41:8a:ae:73:e4:68:b7:a2:27:a3:e9:5d:1e:
1a:b3:b6:c7:c1:d7:21:fb:06:ed:01:a6:a6:b5:5f:
09:4e:08:47:e9:2e:4b:49:5f:2b:ca:35:55:96:2c:
1f:f6:a4:99:b8:6b:71:e9:14:69:00:63:45:da:ef:
4b:8f:a9:ae:9a:8e:4e:16:65:d4:18:de:5c:64:fa:
0c:ef:cb:47:61:57:5d:3a:56:82:14:9c:75:ba:fd:
cd:50:66:f0:1f:ec:09:65:17:16:ec:6a:66:24:9d:
24:af:ec:c6:b4:df:e6:e9:17:82:af:d5:75:cd:ce:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:8F:65:44:A6:46:C4:8F:D4:A0:59:AD:DA:CE:AA:6B:F8:07:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42f66111-2e58-313d-9743-dc4ccb03ea2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c1:97:e9:89:c0:34:f7:29:a5:d0:ed:de:63:75:7e:14:4b:
9d:0c:77:d6:c6:65:1d:bb:95:41:81:16:09:91:6c:dc:16:4e:
61:61:7f:e0:9a:8d:dd:f3:a2:cb:cd:6c:e2:51:1d:ac:b3:9a:
a3:e1:61:c0:2c:fa:1b:bd:b0:a1:09:68:d6:a6:63:34:1a:f2:
6d:20:27:2c:3a:67:52:a1:70:fe:7e:65:95:ae:47:fa:f9:db:
da:e2:8d:9d:a9:b9:1a:96:61:f3:a6:66:6b:44:e9:55:b7:dd:
e8:d2:2e:1e:5a:7a:22:78:2c:69:0f:3c:0b:53:c4:0c:8c:cd:
72:e2:b4:6c:09:2b:1b:2e:17:c9:02:2d:a2:23:c3:ec:95:71:
6d:7a:b4:ee:cb:99:f0:1c:f6:2a:b7:4e:ba:6d:48:6a:43:e4:
95:d5:10:7e:69:fa:e6:a9:95:3f:79:2f:a6:2f:06:c5:f3:f3:
eb:e5:9a:a1:9b:68:08:a2:6a:e1:b5:65:95:1b:d6:ce:9c:62:
51:bc:a7:60:87:06:33:23:f9:c8:01:27:86:ee:b5:b4:42:67:
ad:bb:01:22:b4:f6:db:6c:da:81:86:ca:ca:a9:5e:1d:e4:f7:
24:98:52:81:66:21:04:de:ba:47:51:cb:11:5c:cd:44:34:f8:
c4:0a:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:28:59 2026 by rpki-client