
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
File: cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa (raw, json)
Hash identifier: gFu5DtDwGooiBMgRl1qqjDgTy1ErVnpONCwH/eHicdU=
Subject key identifier: B5:8B:9A:E3:08:72:E1:CA:C1:05:54:D3:3B:A1:DF:C8:B7:A2:D0:2A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4987FDF707510ACAB756AA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36628
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:fd:f7:07:51:0a:ca:b7:56:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=74ee93aa-299f-455d-947b-a57f1f86c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:51:b7:f3:28:86:5e:59:50:e8:d7:6e:60:
c1:c7:d0:8e:73:9f:b1:4f:05:ad:c7:12:f4:3c:e7:
8d:0b:b0:9c:ab:37:cd:c4:10:7e:4c:66:12:ab:b9:
4e:dc:14:ff:49:b4:ec:6e:c8:c1:7d:37:89:a8:db:
d2:af:d9:89:45:04:36:3a:ed:58:a6:80:be:87:91:
2f:d4:4b:2b:49:8d:8c:19:76:ba:73:9d:ef:d9:31:
fc:d9:72:e3:02:a4:94:8d:e8:62:e6:43:d8:d9:6d:
57:75:fe:04:ee:0d:a3:23:5b:aa:b8:5b:a9:6b:46:
a1:00:8c:5b:a9:56:1c:2f:7b:f7:30:f1:ca:69:5d:
09:c5:1b:38:02:e7:02:ff:53:6e:5c:f3:8c:04:71:
6c:d6:8f:d3:eb:e1:e8:7f:3f:23:9c:96:11:a9:26:
66:30:62:db:51:ea:a5:97:c0:88:5e:fc:a0:a4:ce:
da:14:ad:7f:b0:f1:23:6b:cd:7b:a0:04:63:38:56:
09:b4:b3:18:77:58:4e:0b:ac:ec:39:ba:cc:df:fd:
7c:ac:8d:db:a8:47:ad:37:92:04:10:fe:bd:f9:f3:
8d:e9:4a:04:0e:58:35:22:59:e3:cf:bb:9e:af:36:
38:24:4d:61:6e:f7:a9:0d:59:78:1e:82:fb:79:71:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:9A:E3:08:72:E1:CA:C1:05:54:D3:3B:A1:DF:C8:B7:A2:D0:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb1f2ad-d645-34ef-8c29-cd28a8fc0f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:41:b2:cc:55:2d:79:a4:bd:4c:1d:6c:9c:d1:21:24:dd:05:
5c:77:9c:d3:4c:c6:57:74:32:79:00:86:ec:80:7e:4f:77:69:
62:ca:71:bb:b3:4d:7e:d4:24:51:8b:6b:8b:8a:b5:40:66:45:
f0:d8:02:16:d9:04:77:68:69:9a:3e:ef:8d:1b:ad:79:62:5d:
5d:4d:35:b4:66:fb:4c:33:cc:fd:76:07:67:a7:8a:83:47:d2:
f5:c2:d0:8e:f3:d8:a7:46:c9:64:6d:36:fc:5c:ee:21:8d:a7:
de:1e:b3:37:b8:72:25:67:d4:0d:c9:68:27:b4:b4:6a:61:42:
e5:52:42:64:d3:16:c9:da:a9:f8:bc:d0:30:63:05:81:5b:90:
10:b3:d5:c9:fd:25:87:28:2f:8a:26:77:95:3b:b8:72:7a:b5:
97:50:86:d1:64:b1:65:db:55:13:f3:5f:fd:a6:ab:f0:78:f7:
4e:cc:d8:b0:fd:46:ff:85:34:82:f5:24:02:32:ec:1d:b5:5d:
72:b9:61:80:a0:26:86:dd:64:12:28:60:4f:35:50:e8:2b:2d:
75:62:5b:52:2a:49:21:04:49:dc:90:5d:48:89:67:9c:31:e5:
79:88:53:02:46:c5:43:6a:df:c2:86:d0:22:83:da:c4:87:37:
c1:a2:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:34:19 2026 by rpki-client