
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95ca5daf-58f3-3332-bcd7-e15bc57f18f6.roa
File: 95ca5daf-58f3-3332-bcd7-e15bc57f18f6.roa (raw, json)
Hash identifier: iDuD/Ygi5DxyWVAsLP35Y9mk/lBDrFYtbExnNCmbKdI=
Subject key identifier: D2:11:CC:C5:33:5F:1D:57:19:60:07:63:D8:0C:A3:12:2D:3C:F9:DD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4988B7AE651B47DEAEEC0800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95ca5daf-58f3-3332-bcd7-e15bc57f18f6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397195
IP address blocks: 2001:500:856e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:b7:ae:65:1b:47:de:ae:ec:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5bfe3e61-db65-4f41-add5-6fda6e2f6b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:54:b6:4c:8c:fc:a7:c3:95:3d:b4:03:c6:
c2:1e:75:26:cc:78:40:d0:93:2c:71:49:4f:28:6a:
f3:3c:0d:77:e3:c7:2d:7b:d4:e9:eb:25:6d:b7:98:
11:d8:5b:76:6f:ac:ae:32:5c:24:fa:5b:a6:d6:75:
46:e0:d0:a7:50:79:46:26:b4:ca:d3:bb:4a:37:8b:
47:99:af:de:72:59:b0:ac:46:38:f7:bb:e5:72:52:
32:d8:3a:67:c9:61:ee:e6:97:41:a1:9f:05:8e:54:
85:bd:1b:16:ae:9f:d3:46:6c:1b:26:ee:8e:79:48:
a3:da:5a:13:27:ed:69:4d:4c:6d:f8:ee:d1:d7:69:
fe:93:fd:9b:e1:5b:6b:a5:10:16:95:6b:6d:48:11:
f4:ca:15:b1:ec:19:0e:76:90:de:bc:86:f3:fe:d6:
ed:93:34:f7:3a:66:e7:5e:4d:2c:21:ec:8d:94:8c:
4d:57:74:eb:7d:a9:75:4a:28:95:6a:0a:e6:eb:90:
4b:4d:b8:4e:eb:9c:2d:2d:36:69:4f:98:80:88:28:
d1:7e:58:ab:9c:11:1d:50:7f:dd:a8:34:d5:a0:96:
f4:08:c0:d1:81:f3:8c:c8:45:41:d5:ac:59:b5:46:
49:d7:e4:dd:3d:e4:19:39:a5:9b:ab:54:74:53:fc:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:CC:C5:33:5F:1D:57:19:60:07:63:D8:0C:A3:12:2D:3C:F9:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95ca5daf-58f3-3332-bcd7-e15bc57f18f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:da:3f:0f:ea:b3:cc:19:6d:10:44:bd:65:0e:e1:2f:8e:a0:
10:5f:d4:66:23:bd:32:51:46:2e:72:c0:75:23:61:47:3a:49:
c8:80:57:b6:b6:a2:40:be:c3:a0:1f:82:29:59:70:5c:a2:93:
a7:24:62:ea:94:5c:27:ef:61:e9:5d:59:27:7a:b6:68:e9:93:
71:67:5a:31:c6:8f:1d:2f:53:3f:8c:78:fc:2e:16:fe:83:10:
b8:44:64:21:ea:88:e1:05:c4:b8:5d:c6:cc:f6:b9:a4:4e:30:
34:23:34:e2:ad:bd:17:18:10:2b:89:9e:1b:8e:01:8d:7f:59:
f4:4e:b4:94:4f:ca:9d:b4:d1:cc:3f:19:c8:92:9f:14:61:e0:
91:b6:86:21:02:55:91:4d:4c:2d:25:e4:c4:23:38:9e:aa:06:
7a:b7:d4:8c:76:ab:53:d5:d8:c4:8a:c9:f9:45:1a:0b:8e:c0:
3e:d3:81:a6:c6:4c:e9:98:22:0c:bb:63:f9:13:7f:f5:ff:dc:
43:3e:b4:52:54:ab:5b:b1:de:36:1c:90:ad:61:41:28:c0:26:
83:b4:57:02:54:df:22:7d:34:5a:fe:13:0e:7f:b3:e4:10:8f:
67:19:c8:ec:a9:f5:de:3a:54:c2:bd:67:9c:7d:1b:b3:f2:a7:
95:84:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:05:38 2026 by rpki-client