
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa
File: c90bb841-d0aa-34df-aabd-736f7d9a0842.roa (raw, json)
Hash identifier: K2KxKIyCtGj7ngIQg92k/QRz9GM6hbUvVdqGGMN2LN4=
Subject key identifier: DB:8D:86:3A:48:F4:3F:84:8A:63:DD:37:BF:D3:22:24:1C:57:22:DB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498648A0868E85D3959ACB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396542
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:48:a0:86:8e:85:d3:95:9a:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=86b6a907-5fea-4a88-8718-a5ae3716fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:a0:f3:1e:ec:a5:15:b3:b5:65:7c:3c:60:
ac:97:a7:94:01:62:e3:20:58:cd:b2:65:01:af:f1:
79:08:7b:5a:57:6e:72:90:15:e5:c5:cd:e1:e4:ee:
11:c8:b4:bd:01:c7:36:6f:8a:8b:7d:96:ef:a8:57:
f7:17:4a:0c:af:dc:21:ae:51:b2:97:f8:a0:1f:3f:
c8:0e:9e:60:3a:67:8c:b5:22:4c:27:45:a7:92:24:
d2:fd:9c:c4:4e:06:c7:07:ac:68:21:66:59:3e:5f:
49:a6:06:6c:1f:7f:69:c9:b2:d2:57:35:10:66:21:
11:89:64:74:9c:1d:2b:36:e5:2e:5a:94:68:07:a9:
33:34:e0:6f:d1:78:d4:17:ff:48:b3:7e:49:e2:b0:
96:b2:66:2b:c8:66:9b:21:fb:b0:f0:ba:ed:6a:89:
2f:dd:e2:96:4d:35:33:0d:5f:0f:7d:b2:61:59:b4:
37:2c:4c:fd:66:4d:5f:8c:a1:2f:29:d5:2a:99:b1:
ad:50:b9:e9:b7:93:c4:d6:f4:9a:c5:69:42:1b:76:
34:1a:90:37:5b:2f:e0:a0:5b:61:3e:df:81:0a:bf:
02:47:e4:9d:68:b7:a6:b4:ab:29:b1:43:fd:a9:0f:
71:4c:94:41:d1:eb:13:4e:77:7e:31:cf:1b:b9:45:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8D:86:3A:48:F4:3F:84:8A:63:DD:37:BF:D3:22:24:1C:57:22:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5e:0c:5b:74:29:88:04:c1:c0:eb:3a:af:dd:0d:1e:b2:8b:
b5:dc:9e:ab:ec:9b:b3:9c:d5:1d:2c:88:93:85:9b:94:5e:24:
02:f7:b6:1c:e4:12:17:b5:a0:62:6e:a6:c8:1e:c6:0d:a2:6b:
f9:63:bb:31:2e:6d:4c:7e:95:9a:2f:9e:00:78:4e:e0:72:42:
74:ac:33:f9:59:7e:6f:12:5c:5f:b3:98:02:dc:66:49:e0:92:
e5:91:81:31:ad:be:ce:aa:d7:81:78:06:ea:09:d1:8c:4e:b7:
dc:7f:8e:f8:b9:c9:ec:83:62:79:5b:2a:ba:16:aa:37:4e:b5:
f7:cc:c3:25:44:ee:44:65:cb:46:52:ec:83:57:38:de:8a:12:
51:98:24:07:7b:fe:db:66:f0:8c:91:f2:ff:ee:8a:a8:de:d3:
ff:0a:04:78:7e:35:00:bb:30:72:cc:cf:ee:0d:f9:9f:42:01:
c0:92:05:44:4a:4e:d1:13:4e:38:a9:f5:24:33:02:58:d0:2b:
59:cf:3b:aa:be:39:d0:70:fc:b3:23:80:ce:eb:16:52:c6:5a:
a6:dc:5e:de:3f:c1:61:79:56:22:71:51:08:81:b3:a2:6f:31:
eb:d8:f2:dd:c1:7f:b5:a0:a4:7f:d6:87:3e:5f:ca:a2:1b:69:
0f:13:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:31:08 2026 by rpki-client