
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d43c7c-5235-3246-8617-e3886fabd616.roa
File: d1d43c7c-5235-3246-8617-e3886fabd616.roa (raw, json)
Hash identifier: Rza2j2sgpZ7Q+c2odeWObSn2MDAGm0Rtpt8TLbjv/I4=
Subject key identifier: 85:30:A5:3E:6C:07:B1:61:0C:05:9D:63:66:AF:E2:40:00:83:B7:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA788D70362D0AA0FA4A99180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d43c7c-5235-3246-8617-e3886fabd616.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396581
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:d7:03:62:d0:aa:0f:a4:a9:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fba77ee5-c997-420c-9eae-6f6b8206f430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:8a:ee:9c:f1:6d:ab:7b:88:ec:2c:e5:e1:
7f:e2:26:f4:ec:d8:c4:fa:ce:8c:15:d4:3a:4c:d2:
2e:f1:a3:9c:f5:19:86:9e:5a:c3:57:f4:4d:b3:36:
cc:ce:9a:08:2a:96:f9:2a:0d:1e:20:9b:a2:f6:73:
a4:3e:f6:01:1a:0d:7f:a5:96:0a:57:9e:05:ed:60:
d3:7f:84:fb:4d:79:21:07:c8:65:1d:6e:6a:9a:23:
24:e7:c4:c3:1f:a3:f3:52:40:47:cf:13:c8:a7:46:
c4:d9:31:ee:e4:05:40:57:7f:0e:d2:ed:6b:e8:a7:
34:74:db:63:f4:06:2f:7d:a6:25:4c:71:af:67:90:
ca:2a:24:2c:8b:ce:24:b7:16:03:eb:09:30:4e:e9:
4f:f3:21:68:69:90:6c:ce:a5:2a:f3:23:5e:a0:71:
53:06:6f:8b:8d:13:68:b2:0e:0c:ad:54:5d:0a:82:
4c:79:9f:57:50:5b:7e:43:af:6c:20:80:ff:b4:d9:
71:28:e5:89:82:73:1b:d2:c9:85:cf:81:99:28:6e:
ca:66:ea:31:a4:dc:91:e0:cb:c2:0c:5f:95:d4:31:
1a:31:cc:1b:51:d1:9f:ac:b2:c1:ef:2c:98:8b:c6:
5d:bb:fd:ae:5f:56:7d:ad:71:89:eb:96:dc:39:ff:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:A5:3E:6C:07:B1:61:0C:05:9D:63:66:AF:E2:40:00:83:B7:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d43c7c-5235-3246-8617-e3886fabd616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d3:fb:eb:ba:7b:58:73:5d:0b:1c:19:50:c4:c7:99:af:b4:
be:a9:21:64:f6:45:d2:74:dc:43:dc:80:c5:b5:27:6d:de:5d:
0c:53:db:58:42:40:0c:0f:e9:cf:e7:2a:1f:de:86:73:89:b9:
ef:cf:42:2e:60:00:ec:e7:47:34:35:6e:1e:b9:9d:e1:c3:c3:
0a:11:23:45:dc:6b:19:be:e7:25:9a:50:0d:fe:d5:5e:b1:d4:
55:bb:c4:45:6d:fb:7b:98:62:1a:63:2a:07:99:29:80:26:5b:
58:95:d7:19:f3:f8:56:5d:53:5b:1f:10:17:1b:3f:86:af:b7:
e2:96:6a:eb:f4:f2:49:e1:85:f9:80:57:cc:6e:a7:da:5e:d3:
46:f6:db:eb:65:02:14:9d:0a:c5:5e:72:ca:01:be:93:bb:71:
eb:b1:b7:bd:de:66:57:82:7e:78:5b:ae:9f:86:2b:cb:2e:05:
22:07:57:0e:69:07:74:b0:15:2f:7a:69:2c:77:f2:26:a9:2f:
75:ae:da:ed:c5:13:89:13:f1:dd:39:a6:a3:15:0a:97:c0:79:
04:30:52:f1:07:9a:07:9d:06:e3:3f:4e:44:15:ba:fe:3c:67:
8c:87:7a:38:11:c1:bf:09:5f:cc:2f:1f:5f:10:a1:78:39:26:
b6:2d:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:21:21 2026 by rpki-client