
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa
File: 0657f7f5-7f76-3faa-aa0d-715353e6b632.roa (raw, json)
Hash identifier: zZLFew2WWDB4333s6x+6HVwutC6V03T3h25KCdkResU=
Subject key identifier: 3C:EB:E9:B9:28:0F:AD:5C:AC:14:97:76:7A:76:F0:9A:48:A0:3E:C7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4C3D3F32D074E1201D1E5E90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 36624
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:3f:32:d0:74:e1:20:1d:1e:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=43fee55c-3c1a-4cc6-bdef-fadb7b1db01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:08:8b:5f:db:11:34:60:07:83:6c:b9:88:
e8:c3:3e:f0:5b:04:fe:38:cf:3d:b8:9a:d7:75:24:
f7:71:73:00:39:d7:68:a2:af:8d:d7:bc:32:38:70:
72:d1:f7:16:7e:d3:68:af:b0:db:7b:7a:36:8a:64:
aa:ce:5c:c9:13:bb:be:5e:d2:b9:38:82:95:1c:30:
1e:de:82:47:14:d1:ce:72:2e:b8:c1:26:80:a4:db:
15:6f:ed:1d:61:3b:5b:ba:be:c7:c3:de:58:dc:84:
f5:72:91:b3:5b:16:f8:1f:8b:88:62:11:0f:24:8f:
7d:a5:9f:1b:7b:6f:06:c1:a2:e2:8a:84:17:76:cd:
d8:b5:cc:b0:c1:d4:e6:8d:e5:d9:f6:73:6e:26:96:
9a:54:36:38:e9:3b:2a:9b:51:73:ae:38:c7:48:4f:
6f:3a:25:5b:11:5f:cc:aa:a1:ca:c6:ab:8f:4c:b7:
1c:5d:1c:3a:7d:35:7f:41:bd:7c:06:1d:62:a9:70:
ef:7b:7c:29:00:f9:35:50:ba:42:bd:09:63:f0:e2:
2b:06:a1:fc:57:d0:dc:11:d0:0b:a3:8f:9d:97:3f:
ed:6b:53:f7:1b:62:b9:9a:9f:62:4c:18:f7:e1:00:
40:e5:ea:6c:fa:7b:2b:ad:a8:61:b3:0e:fa:5f:2c:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:E9:B9:28:0F:AD:5C:AC:14:97:76:7A:76:F0:9A:48:A0:3E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:7b:72:f5:e0:70:0e:c5:af:d7:fd:dd:79:1f:5d:2b:69:d2:
e6:f3:a7:bc:3f:27:32:0a:8e:9a:f6:99:94:56:56:86:6d:26:
e9:ef:0c:99:30:48:1e:f7:7e:3c:a8:56:06:2a:ba:01:a4:26:
96:19:91:84:f2:ff:23:b5:d5:c5:1a:b9:d0:56:1a:8a:a3:79:
cc:b3:0a:7b:99:32:a6:3e:79:bf:6d:ed:8c:df:04:94:c7:92:
3e:42:7e:8f:c4:cd:9b:16:aa:cc:7e:2d:e3:be:fa:33:a4:27:
1e:ef:13:92:8e:94:ea:06:fd:f8:cb:ee:5d:95:86:67:b7:07:
19:2e:5a:81:18:7c:f9:87:f4:7f:81:57:13:f8:6a:6f:84:c1:
d0:6e:ae:2e:9c:f3:81:1b:1d:bb:ec:15:bc:47:18:0d:cd:e1:
2a:31:e3:67:0f:eb:46:61:91:b2:14:f0:3b:6b:df:7a:8b:26:
33:ce:76:40:ab:be:e0:86:3b:ed:31:35:42:05:42:27:45:20:
7c:47:97:3f:3a:6d:2d:f1:6f:d4:ae:31:dd:66:54:97:b0:ed:
9a:f9:d8:5f:50:fd:f1:dc:ee:26:f5:4a:81:9a:e9:ef:83:90:
83:ba:92:c7:0e:f2:80:f8:b6:be:fe:20:ab:8f:0b:17:06:1f:
69:de:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:39:53 2026 by rpki-client