
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e8e6b-7e0d-33d3-bb1d-9547a058d021.roa
File: ff3e8e6b-7e0d-33d3-bb1d-9547a058d021.roa (raw, json)
Hash identifier: XfZDVDAFN1XIKu5LRERMvkCaMF8Jkn9agx1CPriJ9kc=
Subject key identifier: 5A:B1:A3:D4:5E:0D:9F:99:AE:3D:DA:D0:F2:71:EE:2F:23:14:19:56
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498629CEC7A0E07BD027D1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e8e6b-7e0d-33d3-bb1d-9547a058d021.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396545
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:29:ce:c7:a0:e0:7b:d0:27:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e789bf8f-7daf-4ea9-8f74-9521a0577fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:0e:4a:76:53:3a:82:4b:df:67:d0:e9:b8:
da:f5:dc:4a:1b:e7:d0:be:dc:94:6b:38:45:53:87:
60:97:40:6f:4e:4f:31:7f:ee:8f:a3:c1:58:2b:cf:
e4:20:9b:5f:3d:ae:b7:34:36:62:53:ba:0f:de:d7:
5b:35:4e:e8:d7:6e:c9:12:83:74:f7:df:93:7f:f5:
65:67:a8:7a:0c:84:eb:89:b7:5f:ec:7a:44:f6:e9:
c8:48:0c:00:0c:23:9f:cd:14:f7:f2:31:8c:5a:d9:
45:f3:f8:63:70:32:e3:da:2f:a5:e9:8c:ea:d5:a3:
f0:8f:3d:ab:84:15:c8:94:65:af:ac:37:3c:47:a6:
d5:64:56:41:d3:2f:e5:0f:86:c5:1f:54:57:e2:36:
f3:d6:57:5b:29:6c:33:8a:7b:90:28:b6:d3:7f:d2:
4b:69:8f:39:9b:c2:00:9d:76:e5:de:fa:15:a4:85:
bb:72:20:0c:b8:78:64:6a:bd:f1:75:3b:2a:18:e4:
04:a0:b9:ce:d7:af:33:78:6f:93:0a:32:82:f6:16:
45:ed:0b:6b:71:ff:38:a7:62:28:06:63:b8:a3:99:
ed:74:a3:ff:70:23:c0:18:91:f2:a8:3f:51:83:a8:
48:3b:0a:e5:9b:23:c6:f4:24:3c:c8:20:9d:dc:f2:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:A3:D4:5E:0D:9F:99:AE:3D:DA:D0:F2:71:EE:2F:23:14:19:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3e8e6b-7e0d-33d3-bb1d-9547a058d021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:8f:21:ba:7d:75:ab:45:23:b3:fb:a2:83:5e:2c:f6:65:03:
2a:d6:cd:9b:1c:87:b5:31:94:ff:d3:5e:7a:89:32:f1:bd:cf:
61:03:f4:da:33:75:34:fc:6f:e6:b4:99:ff:f4:89:dc:4e:dd:
6b:e7:f3:1b:81:98:57:eb:77:8d:2e:1f:58:c0:70:91:8d:eb:
01:60:82:f2:9e:46:d4:ac:47:4b:84:e7:50:70:9e:8e:87:32:
33:de:4b:d5:23:98:df:43:6a:44:10:ff:c6:d4:77:4c:b4:08:
84:1e:41:16:ca:4f:c4:be:17:e4:e8:97:b9:69:ec:5c:fa:e4:
a4:2d:32:a8:b0:11:99:b4:ca:38:5b:6a:e1:38:c2:3f:ce:e6:
ed:de:d3:8f:7f:98:25:77:e6:3e:65:63:a0:a4:8d:c6:d2:09:
15:3e:46:6e:6e:d9:e9:55:2d:44:b7:23:4a:08:c4:65:c8:2c:
84:9c:d5:37:83:84:89:a5:58:79:26:04:02:49:f6:d8:ad:37:
24:83:6c:20:48:2b:8b:08:01:82:12:33:c7:29:8b:1d:c8:9a:
e2:55:02:e0:74:ec:22:89:da:92:37:5d:5e:21:18:84:53:46:
9f:24:fd:6e:1f:3c:dc:e3:20:53:c5:b7:46:3a:1f:75:33:a6:
ca:b6:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:55:04 2026 by rpki-client