
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa
File: 7f358a3b-7da3-39a6-a904-031bc4fe546e.roa (raw, json)
Hash identifier: VN8ShHwD0ZsCoQyP4d69rbIKHwYkcRCTiwWgM9IqEwk=
Subject key identifier: 9C:6A:11:C2:12:BF:28:51:1F:9D:70:65:99:14:F7:35:86:96:55:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA787CD4C882E5BADA0037200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396585
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:cd:4c:88:2e:5b:ad:a0:03:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fee5ec9d-d944-42fa-969e-b05816e9619e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:4e:d1:ec:38:6d:c0:67:98:6d:88:af:c6:
0f:fc:31:28:cb:80:5e:6e:a8:3d:64:8a:73:82:1c:
02:47:b1:d8:01:10:5a:68:46:5e:4f:53:24:1d:7b:
ea:2e:48:a6:d0:b8:31:8d:15:17:96:54:74:82:86:
22:bf:b6:36:71:59:28:ef:f6:37:c5:0b:d8:96:c0:
94:b1:76:97:96:fd:6a:fa:4f:1d:79:bd:89:f7:63:
a8:19:a4:9b:8b:3c:bb:d1:0e:93:60:6e:79:5c:9a:
86:31:27:ca:a1:b6:81:ad:d6:f1:d6:35:59:d1:a0:
f9:2f:eb:43:d7:95:39:df:96:72:da:15:c0:ff:7c:
a8:8a:fc:1a:41:d3:86:fb:2d:17:e7:d7:26:1d:89:
98:df:69:c8:0c:dd:58:a8:78:71:5e:76:97:dd:0e:
14:31:12:6d:52:25:46:7d:47:35:29:b2:20:02:1e:
1d:0b:48:63:6b:fc:a7:42:e5:5f:6e:de:44:b1:79:
6e:75:28:51:35:4e:85:27:f6:c1:8a:78:ee:94:5f:
51:0e:c3:85:0a:31:c7:fe:84:9a:fa:32:85:2a:2d:
2d:e3:39:9e:87:5a:5f:15:d4:eb:67:77:d3:24:7d:
53:5a:b2:2b:2b:e0:da:27:2a:5a:e3:52:3c:bb:b6:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:11:C2:12:BF:28:51:1F:9D:70:65:99:14:F7:35:86:96:55:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f358a3b-7da3-39a6-a904-031bc4fe546e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:0e:1a:3e:17:60:bd:fb:e7:2f:0d:b5:95:35:45:b2:23:6e:
98:c4:4d:a0:5f:59:23:75:db:3a:fd:71:18:0d:05:2c:e8:b2:
35:ee:8d:9d:42:db:73:0a:e6:ce:7c:67:ae:2b:57:9c:8c:40:
68:d6:46:0a:4d:f4:ca:38:61:fa:06:ab:05:0d:1c:e0:0d:9f:
a0:66:6d:22:bb:22:36:bf:88:d3:17:99:7e:ce:e4:f2:9b:f3:
b3:f5:3b:20:11:7a:1c:46:f0:21:24:cb:35:cf:67:18:98:aa:
d6:e4:36:31:bf:d4:15:dc:f5:fa:68:11:19:c6:96:b1:2b:92:
13:c9:16:eb:65:ff:a2:ab:fb:dd:27:5e:cf:88:31:2a:36:cc:
a7:3b:54:83:8c:f2:af:98:40:6d:2d:87:60:61:6d:32:e7:00:
ab:56:e8:a1:c6:87:9d:9c:96:ff:b5:4b:d2:40:9f:62:3d:18:
15:4c:f4:a8:16:25:49:c9:a7:a1:62:b8:13:8b:7e:c6:85:b6:
70:48:63:5a:84:f3:ba:2e:3a:49:ba:c3:1a:9a:3d:90:2a:bb:
08:e4:1b:3d:72:f4:5e:1b:f0:38:93:1c:2b:24:4b:b8:0d:bc:
e5:13:fd:31:bf:fd:6d:c5:57:03:d7:46:e9:d6:62:13:5e:0c:
28:16:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:45:55 2026 by rpki-client