
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa
File: a024df37-caf2-316a-905a-bdeae9fc90f3.roa (raw, json)
Hash identifier: 9TtV1tR+420KUJ3sp5mF7Kxl/NyGrPhwR+Cj/CKGWbM=
Subject key identifier: 78:63:E8:58:8C:27:A2:19:A2:11:1F:1A:29:FD:52:3A:67:99:CD:82
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A759859BCF6059444F4F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 396596
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:59:85:9b:cf:60:59:44:4f:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=b6ce0a2f-2458-45b0-979d-2f01762f71b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:1f:00:85:ea:81:f0:44:5b:42:c9:fc:4f:
a4:2c:e2:dd:ad:c7:1f:31:73:78:f3:89:d4:43:d0:
23:c9:00:0b:41:74:ed:0a:da:31:84:b9:e7:b2:88:
a9:32:12:73:ab:82:4a:3e:58:ab:4c:39:0b:5f:0b:
89:e4:3e:18:ed:e1:08:00:15:87:a7:75:f9:2e:48:
68:35:06:35:6f:08:16:2d:af:1c:90:e5:c2:f0:f1:
6c:56:45:63:44:cd:32:0c:9d:44:55:8d:58:26:53:
17:80:ee:03:a0:65:35:38:63:91:31:dd:ed:3f:44:
fe:05:a3:aa:82:a8:1d:b2:c7:58:f4:5b:f4:fe:9c:
f3:de:87:c5:9c:80:ef:1c:44:64:f9:75:95:e8:68:
63:c1:64:a3:e4:89:29:15:6f:ca:df:80:38:30:1a:
87:40:28:01:8e:43:ca:e5:a6:e4:e3:7e:6f:6a:58:
ad:ee:fc:74:e6:8c:59:ae:54:7e:d2:47:c9:af:e8:
e5:c2:b1:7b:51:c9:f0:58:e5:2e:9e:ca:2e:24:71:
31:55:aa:d1:69:02:f4:7b:cf:44:9e:44:0e:f9:8d:
c5:7b:a8:84:23:ed:27:5f:51:ee:3d:38:d8:1c:c7:
55:2b:ad:4b:1f:df:04:36:ba:56:af:71:de:35:92:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:E8:58:8C:27:A2:19:A2:11:1F:1A:29:FD:52:3A:67:99:CD:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:d8:24:e7:b4:35:28:8f:c0:9b:53:67:4e:02:0e:b6:2f:f0:
bd:98:5f:7c:d5:89:ba:cd:89:44:44:af:62:a0:0b:5d:7a:b5:
97:12:3f:de:78:0f:59:79:f4:3f:c8:21:d8:84:d0:dc:c7:5d:
f3:a6:ff:5c:b3:ff:4a:2b:53:99:3d:07:dd:4f:91:d2:db:31:
41:f3:8f:02:9f:38:b3:a0:6b:45:49:02:9a:6b:31:6e:fe:ef:
4b:ac:b7:43:2d:d2:93:89:93:0d:2c:e1:0d:3b:00:9c:b1:09:
5d:d2:4e:46:ba:4b:7c:c1:58:7c:09:77:5e:ce:b4:69:b0:68:
34:84:28:02:70:24:b8:76:b4:1f:e2:fd:bb:36:14:ca:51:c7:
7c:0f:1a:5c:d0:50:f7:95:6f:bf:9f:92:5d:3e:5a:ef:f9:3d:
89:10:4e:70:f0:10:f5:c2:8b:bc:f6:35:53:59:05:b3:8f:d6:
c7:de:da:7f:93:45:2d:ea:a2:ed:1d:9b:67:1a:63:a5:fc:af:
18:33:00:2d:70:fb:01:b7:cc:7e:64:ff:82:5b:d6:c1:99:c7:
2c:c1:6b:d8:d9:bf:0b:9d:f6:92:4d:b7:98:44:a5:59:97:53:
31:c2:db:71:b0:69:83:9f:0e:cb:b6:37:27:ba:52:b5:dc:90:
16:19:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:08 2026 by rpki-client