
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9b4658-1f7d-3ffb-a149-a815bd12001d.roa
File: 0f9b4658-1f7d-3ffb-a149-a815bd12001d.roa (raw, json)
Hash identifier: FgGjLIg9V6m8MPhl1jqiEMQlKEIyRX+y8wchsTgniaI=
Subject key identifier: 2E:FA:02:06:46:23:10:A1:C2:ED:CE:8C:EE:87:CC:B1:2D:90:61:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2D87BE5411BBD8BDEB757C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9b4658-1f7d-3ffb-a149-a815bd12001d.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 36628
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:be:54:11:bb:d8:bd:eb:75:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=86e3e426-70b5-4925-9550-403314666dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:e1:66:da:ef:2f:e2:1a:4e:2f:e6:73:1f:
c2:95:3b:be:92:e2:05:6e:f4:14:2f:34:68:d7:49:
49:e7:b7:0b:12:7f:1d:e0:fc:75:60:6a:1a:f3:75:
57:0c:b5:05:14:d3:19:96:34:13:5d:14:6d:ee:bf:
d0:79:4a:56:f3:9f:ec:88:82:d0:8f:ae:c1:cd:f5:
3d:3b:e8:10:76:9f:16:ea:30:71:0f:cd:c4:3a:fb:
87:58:a3:ff:c7:ce:9c:d8:56:af:0f:ab:c3:51:cb:
97:26:e5:bd:7a:f3:81:4d:87:e1:e9:67:64:ca:cc:
5a:53:3c:b0:e3:c6:58:21:e0:35:fd:6c:25:89:bc:
a4:6c:8d:f5:0a:f8:cb:9c:e3:3a:ca:12:0d:ed:27:
e2:a3:6f:7a:0d:68:21:7e:a8:75:87:ea:3f:31:6f:
e8:8c:98:06:d9:a6:bb:98:8d:46:0b:44:d4:4e:0b:
67:c5:49:5f:09:df:11:78:33:b6:cf:aa:8b:f5:97:
28:49:1f:60:95:cf:dd:15:e7:ee:25:61:90:60:5a:
bf:62:4f:45:33:45:26:70:9e:f8:0e:60:81:4d:02:
2d:6e:49:6f:f7:5c:74:bc:a9:58:26:09:58:35:bb:
3b:3c:97:df:7e:09:74:0d:a1:4c:e3:c9:a6:5a:27:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:02:06:46:23:10:A1:C2:ED:CE:8C:EE:87:CC:B1:2D:90:61:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9b4658-1f7d-3ffb-a149-a815bd12001d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:67:24:ef:30:cc:b6:05:97:49:b3:fc:f8:ad:01:7a:c5:ed:
2b:e0:41:14:39:8a:22:ae:5c:72:85:e6:de:1f:e6:3b:ad:4c:
b6:01:28:e6:cf:54:3f:0a:ea:d4:40:a0:8f:40:a3:0e:0b:d8:
8c:6d:e4:7a:90:ae:c4:25:45:8e:4e:a2:5c:58:71:8f:fe:5c:
1f:cd:68:59:3f:9b:b9:17:ad:e9:76:86:cf:17:5b:67:25:02:
cb:10:d0:39:28:77:07:8b:62:9b:f4:cd:76:c1:6f:27:96:45:
97:21:64:78:ee:97:f8:17:5b:a2:98:59:31:23:85:dd:f0:e8:
d7:d3:2a:46:1c:db:91:ee:03:92:39:3e:c3:36:93:0b:6f:aa:
dd:9b:0f:e8:f0:46:2a:c6:8d:c0:ba:d9:66:99:2f:25:4c:2f:
f7:ce:a2:d2:8c:13:69:0f:5c:de:98:7c:39:14:5f:60:c3:9e:
92:d3:8b:d3:00:f2:da:4b:9e:50:2a:d0:c5:0d:f2:04:5c:b0:
30:dd:e1:bb:7c:a4:2b:3c:c5:18:19:b2:5f:9f:72:5a:8c:77:
ff:fd:24:b3:6c:89:62:83:0c:ea:e8:d1:f4:04:a4:41:18:e6:
2f:fe:93:c9:dc:75:57:88:0f:db:e3:ff:50:98:f5:62:8d:ad:
02:37:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:50:43 2026 by rpki-client