
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa
File: 944d2a14-343b-3f4c-8d1b-02871caa602a.roa (raw, json)
Hash identifier: qhhFhF+JrfgymrqSNAtPyak0VwMm+vH59rzNP0Dv6mo=
Subject key identifier: 17:09:4A:4C:A5:48:EE:1F:8C:D2:B8:69:30:65:62:6B:72:50:2D:97
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA79856085EB7470DC5994E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396561
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:56:08:5e:b7:47:0d:c5:99:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=226cdb80-7aac-4eed-81b5-a9ae743da6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:17:3d:0a:da:f3:94:d0:5c:e3:62:82:3e:
2a:e2:c2:5a:32:fa:04:c9:7f:ff:c1:25:72:63:d0:
23:fe:ed:41:3e:31:83:80:24:8a:15:55:e6:c7:31:
8e:fc:dc:d0:b4:8f:6c:02:4c:69:17:74:e9:d9:9d:
98:92:73:f7:da:92:12:19:9b:72:91:f4:61:f1:e4:
20:9a:b1:28:7e:5f:10:cb:42:96:1d:c3:fb:29:9b:
1a:9a:14:ee:dc:72:d1:04:ce:85:7d:89:30:b2:45:
52:1a:d1:e8:c3:08:62:e9:d4:a1:af:49:79:f7:6e:
5f:5a:69:fc:00:40:d7:27:2c:12:c4:3f:46:92:a2:
72:80:d1:f1:ab:6a:10:5e:be:26:3f:1e:8e:3e:bc:
22:43:80:76:e7:9a:d8:92:4e:b6:d0:db:17:b8:c8:
0b:97:7a:e2:d8:c4:d0:37:8e:07:f2:84:c9:a3:db:
cd:f7:7c:ac:c3:e2:bc:c3:a1:0b:7f:38:46:77:00:
d5:07:d0:fe:3d:34:aa:cc:d8:b6:8b:c1:76:21:e3:
9e:8a:42:a2:ee:10:f0:e3:00:c6:3b:ad:cf:32:98:
cf:a1:20:44:35:64:c0:3e:8a:1e:ae:34:1f:b1:1f:
ce:6a:a5:4f:55:c6:f8:ea:f2:54:91:ec:6c:7d:92:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:4A:4C:A5:48:EE:1F:8C:D2:B8:69:30:65:62:6B:72:50:2D:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f7:3f:5d:7f:50:de:5c:ba:c8:73:42:8d:45:20:27:d8:68:
2c:46:85:a6:94:51:5e:da:b8:b5:2a:d1:93:f3:e8:9f:60:b2:
72:de:6b:b9:3a:7a:b7:51:61:49:6d:45:2a:e1:58:ca:a9:cf:
ac:11:5a:8a:04:5e:79:d6:b4:ae:86:16:d9:3d:2e:a2:64:13:
07:31:e7:d2:da:43:28:3d:e8:09:0a:c9:96:62:04:b5:a2:d8:
7e:67:c5:06:f6:a6:b8:90:b8:1d:be:88:a0:67:ce:b0:f5:ac:
64:58:e1:06:d9:ad:17:67:45:6d:fc:9e:61:11:48:32:a8:00:
d7:48:97:a8:f7:e8:e8:10:83:0d:42:05:4f:ed:9d:af:50:43:
92:7c:c7:95:27:04:10:05:e4:7d:7f:49:bc:9d:a3:32:5d:dd:
aa:f5:3d:db:38:96:b7:37:ef:45:39:63:b5:c4:a6:c3:cc:ac:
06:82:d9:b9:10:98:f5:89:4b:24:e9:34:e0:16:e3:98:8a:d0:
29:7a:cc:fb:75:8c:ae:f8:0b:d7:16:f3:d1:6c:56:a3:70:69:
f9:47:0a:27:21:7f:f7:74:8f:a0:02:f7:84:50:2a:f3:ae:93:
f6:9a:e2:c7:47:ac:b9:41:ff:f1:3e:45:ac:3b:71:e3:9c:8a:
fa:82:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:32 2026 by rpki-client