
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa
File: 7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa (raw, json)
Hash identifier: MGQB8KggGca4YbYNO7i4jN9HnRG5kWREXFwzGjj6ZJ0=
Subject key identifier: 68:0D:92:5B:8A:27:00:39:4B:03:70:9A:C6:EF:85:6D:5A:8C:0E:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EDC91F85D4F732E5217F45600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 396565
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:f8:5d:4f:73:2e:52:17:f4:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=8e5042b5-734a-4f06-b598-2d277ab9f89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:00:e2:31:61:84:77:60:1a:fd:1e:00:16:
43:25:b6:fb:31:03:80:31:1c:2a:29:ea:f4:02:e9:
97:06:03:ba:50:6e:6b:1b:7f:97:20:d0:52:31:2e:
e0:26:0f:d5:f9:d4:d5:4d:b6:59:7b:54:97:e2:56:
bc:14:4c:16:7f:bb:45:9f:a1:6b:8a:6e:61:42:b8:
c4:77:0b:95:65:8a:2c:08:59:4a:24:e3:87:4d:54:
b4:5b:b9:80:4d:0d:b7:1f:2c:ec:8b:d0:09:a8:7b:
7e:a5:2a:9a:07:4c:c4:ff:d8:58:d4:1a:b5:c0:db:
e0:cb:5c:ed:5c:f7:d3:ab:39:31:11:68:42:26:51:
28:50:b3:3e:d7:04:8b:0f:a1:b8:d8:e5:b6:c4:a5:
14:d1:b4:b5:50:6b:e3:49:0f:44:9b:d2:86:d1:66:
f6:dc:53:d1:23:ea:db:0b:33:b5:00:06:a2:ae:0f:
c5:74:9c:b6:48:98:2d:b0:a2:be:81:a1:8a:aa:e9:
65:b2:9b:40:39:72:26:a1:bf:bf:e3:7d:68:aa:9c:
1f:8e:c2:3c:d7:c8:df:87:a0:56:43:32:fa:5a:54:
3b:5c:d3:04:cc:9c:97:6b:af:a8:3a:aa:52:71:52:
25:59:64:59:20:81:8a:01:b5:90:39:78:cf:95:27:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:92:5B:8A:27:00:39:4B:03:70:9A:C6:EF:85:6D:5A:8C:0E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d1:94:63:39:c6:3f:00:03:ec:1f:3b:b4:dc:e3:20:80:05:
93:43:ac:e6:80:b7:13:8b:25:51:4e:34:b8:f3:7d:b3:ab:84:
e6:fc:7e:2e:48:91:3d:7b:e9:e4:ee:c7:b1:4f:94:b5:28:e1:
af:6c:a5:e2:c9:76:3c:ad:e6:2f:7f:89:3d:4f:65:44:35:41:
87:6f:43:17:98:b9:75:76:d9:bb:06:b7:8d:34:92:8b:59:00:
7b:2f:50:63:97:e4:e7:6c:81:6a:fe:c9:d9:e6:97:11:73:c6:
64:52:fb:f1:bd:d4:a2:35:73:23:5f:4c:fd:94:a3:b7:fe:9b:
34:07:b9:79:1e:54:cf:c6:b4:af:33:76:1b:1d:78:b9:c7:14:
f6:3d:54:6e:d8:1c:1c:6c:98:cd:46:f2:b7:b1:53:88:8d:07:
17:5d:ca:40:43:3a:27:9b:87:1a:79:29:37:cc:56:08:c9:16:
3c:ad:44:a8:12:a8:21:d0:61:7e:ac:27:b9:fc:69:9b:9a:3d:
3d:57:5b:6c:3c:b4:23:24:1c:94:2b:8e:86:2e:e8:3f:b9:bb:
e6:9c:9a:82:fc:9f:e6:b1:5a:7c:97:7b:15:64:76:25:c9:c9:
c1:41:48:2f:d9:0b:81:85:7b:05:ba:45:f4:22:ab:a3:c9:b9:
ee:e6:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:42 2026 by rpki-client