
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa
File: ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa (raw, json)
Hash identifier: 1V6H/sayso/VA84YQwV73L113pWV4BZmUHBVVNO6TXE=
Subject key identifier: 86:6C:2B:87:0D:B0:1F:23:94:94:85:BC:CA:37:E4:EB:E6:F4:8C:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A7053C52143CBDD1EA3A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 36623
IP address blocks: 2001:500:d937::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:05:3c:52:14:3c:bd:d1:ea:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=f905b867-2c68-42d0-b975-a6bc3cac993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:99:9a:f4:85:ac:26:aa:5c:00:71:af:ee:
a0:02:1c:61:6a:ee:36:93:51:5f:da:45:4c:79:f1:
45:0b:ec:e1:c8:21:57:a5:53:1f:a2:33:6f:7a:d2:
10:9e:23:b2:b9:9a:b7:e6:8a:27:86:40:f2:14:c5:
ed:e1:37:7c:04:ee:38:3c:fe:7d:fc:e1:eb:69:d1:
10:8b:ab:62:51:c2:db:41:cb:ef:f6:7f:90:26:39:
b4:0a:4d:fe:b5:6d:14:a3:2b:34:d9:8a:f8:f5:02:
df:d2:76:d5:21:fc:76:f3:06:a4:26:c3:74:e1:7b:
91:16:81:ad:37:f4:3b:1a:66:10:c9:28:b5:aa:8f:
15:01:30:8b:35:27:bc:93:19:46:4f:63:0b:b3:6d:
b4:1e:09:74:02:57:b3:65:7a:dd:53:71:fc:ca:9c:
0e:b9:91:4a:88:72:3a:43:4f:4c:74:a5:db:cb:b0:
9b:e4:cf:d4:6c:72:7b:89:7b:eb:fe:86:e4:84:18:
3c:32:1b:d9:a2:96:ee:28:ea:cf:0e:c0:71:16:99:
bd:a2:d6:40:aa:be:25:7c:ba:56:9c:b0:56:6c:c1:
e9:98:3c:1d:ea:28:e2:54:a0:5e:5e:8f:1a:bd:ff:
03:ac:27:55:9c:16:82:dd:6d:52:f5:80:1e:43:32:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:2B:87:0D:B0:1F:23:94:94:85:BC:CA:37:E4:EB:E6:F4:8C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:d937::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:6f:fe:f1:00:7c:b6:35:79:c5:2a:c7:e1:cd:99:52:ab:07:
74:5e:84:8d:a5:9d:3e:11:62:e1:09:cc:2f:12:ab:c6:9f:9e:
14:a4:ef:ab:d4:6f:74:f3:fc:dc:87:6d:9f:bc:60:cc:a1:7c:
e4:5c:45:4b:d9:a2:e5:be:a9:55:a1:0c:f3:b3:45:ad:a4:73:
87:ec:b7:b1:b6:ab:b8:93:60:e9:ba:07:a2:ca:a9:1c:56:98:
15:cd:4c:45:0f:6e:d4:2b:a3:db:7e:a7:31:21:96:45:37:9c:
eb:a7:1f:c0:07:8b:76:cd:a1:d6:d5:99:70:ac:b3:30:16:d6:
70:68:e4:54:98:85:7a:75:5e:a3:f0:8f:14:91:1c:43:a4:86:
81:df:20:dd:fb:1a:88:e3:bc:2d:9d:51:43:44:1f:e8:9b:8e:
cf:c3:1f:da:f7:6c:de:ec:7a:5a:2a:a7:b1:92:f7:5e:51:1a:
50:60:e9:bb:eb:7e:67:67:84:7b:d0:4c:57:9d:cb:54:83:d3:
8d:49:28:c0:e0:f9:cf:9d:b7:79:43:7c:d2:6e:02:28:bf:95:
2c:67:c5:df:91:ac:06:71:35:d0:5b:89:99:07:85:9d:18:1c:
75:e7:c0:3b:03:63:a9:5c:b3:e6:c3:a6:d3:5d:91:a0:34:4b:
8f:10:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:18:40 2026 by rpki-client