
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa
File: c486917d-0dd4-3f79-add9-aade1b70ebab.roa (raw, json)
Hash identifier: THx9rsn7HdbsUgNkgOnBQkHKizL4eujk30Sgsbdnzcg=
Subject key identifier: 24:4E:A4:F2:6C:30:DB:2F:49:70:CA:99:82:99:F3:44:D6:9E:8F:FB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4974682B5A172B7B49CE2ED0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397212
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:68:2b:5a:17:2b:7b:49:ce:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=06eb48fa-7677-49ed-ad2c-c1e888b3130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8b:59:18:bd:08:73:aa:ba:47:31:18:ca:47:
27:86:dd:58:18:1c:60:7b:28:cc:ee:a3:59:42:f9:
db:42:60:f9:6e:9c:9a:f8:af:e3:3c:1c:21:08:70:
59:e8:99:36:35:05:3e:64:10:18:4f:56:ca:58:62:
c8:8b:a6:f4:49:b9:49:30:af:bb:15:30:f9:db:e2:
ca:1e:39:68:2f:d5:e1:f4:61:0a:ff:69:dc:6d:a4:
13:83:59:ba:c5:c8:f4:e8:98:a3:61:98:07:e9:d7:
c5:48:67:64:81:3c:ae:51:16:9e:de:fa:af:9e:90:
11:f8:ee:d4:13:17:de:6c:7e:3c:d7:98:9c:57:c5:
6e:b2:c4:3f:7f:c5:1a:c2:11:00:10:56:05:96:33:
d7:10:4e:b7:62:37:38:20:7f:f1:4e:ff:32:71:4d:
97:a6:bd:43:24:da:de:11:91:00:d3:11:7b:2c:76:
68:60:e8:d0:c5:c7:51:93:c7:7e:31:55:44:8b:f2:
d8:75:20:c6:8d:74:80:89:31:87:56:8c:c7:fe:8e:
dc:50:3f:aa:58:d1:f2:32:5c:4d:4d:e3:e7:b5:52:
7d:66:79:17:64:53:b0:ef:57:16:02:a3:3c:ef:85:
41:91:1f:68:0f:88:97:e6:6b:13:8f:b1:1e:3f:1e:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:A4:F2:6C:30:DB:2F:49:70:CA:99:82:99:F3:44:D6:9E:8F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b6:1e:63:1c:70:e6:5e:d2:f3:e6:39:e0:6f:de:af:34:58:
56:e9:ef:46:ea:bd:27:77:b4:18:4c:26:76:dc:31:8e:31:10:
af:32:dc:a8:32:88:e2:0f:08:6d:7a:0b:6e:b0:20:f8:8b:94:
78:2f:94:41:45:b1:e4:69:0f:b5:32:3d:f3:1b:17:da:14:13:
62:9b:fb:18:22:cf:81:65:cc:9e:2d:a6:fe:04:ed:d8:3d:d6:
8b:07:08:34:b0:2e:fb:22:dd:23:d1:5f:34:ca:ac:3d:d8:8d:
36:75:12:19:39:0e:f0:63:04:22:21:fa:16:52:c3:6b:61:97:
68:4b:d4:14:91:36:cd:75:17:0c:e6:b4:1b:0b:61:9e:a3:8f:
ac:6a:0f:12:51:5e:10:35:09:d2:7b:c3:51:a9:61:14:ab:a3:
a1:b6:56:fa:7b:c8:bc:c7:bb:7d:7c:ce:64:7b:f8:61:58:17:
2e:fb:70:44:75:0b:f4:77:fb:9e:60:8e:91:70:1b:4d:4a:39:
e6:7a:27:34:37:3b:c4:a5:f8:50:0e:a6:69:e1:ec:d3:a4:1a:
35:ea:a9:31:6b:6b:66:2e:7c:e7:05:40:6c:41:40:84:7d:1c:
ee:b0:dd:05:87:a9:82:36:51:21:a7:b5:4b:de:fa:f9:c9:1d:
ee:a0:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:16:23 2026 by rpki-client