
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa
File: 23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa (raw, json)
Hash identifier: X08vQTvOPaxGD3oD9yJHEE4bl8gXIdMmXHGStlW+mWs=
Subject key identifier: 29:04:BC:ED:F5:65:76:7A:99:9D:4A:18:67:BD:3B:12:68:CF:31:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06727E6F927A139823D3CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396562
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:7e:6f:92:7a:13:98:23:d3:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=d486806f-1cb7-4283-a1dd-791a53da42dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:01:23:e0:8b:d5:bf:02:16:a4:97:3c:15:
2f:f1:16:8e:14:8c:f0:95:3f:cc:b1:8e:df:88:ff:
b8:5c:88:1b:20:78:0a:a0:0c:d7:29:dc:f3:1b:73:
59:85:e1:95:75:06:7a:47:0a:20:c3:7a:7f:e4:e2:
df:70:2b:95:05:ab:4e:f1:ba:11:01:91:78:66:dd:
75:00:2d:7c:b2:22:63:7d:5b:06:aa:a8:47:57:a4:
9c:98:58:c2:ac:bc:b0:6a:5b:a3:a0:f8:7a:00:b2:
90:1d:51:d7:25:b2:b0:20:3d:eb:69:e1:25:0c:5d:
35:94:58:5e:e4:ed:7c:1a:dd:2e:12:78:42:51:2d:
15:71:9e:f2:e7:f3:5c:ea:9d:65:cb:a2:db:a0:77:
c5:e7:b0:c2:a6:8c:ec:f7:fd:4a:5d:cf:e7:0a:55:
83:89:12:fd:bf:4b:af:27:75:4e:3b:a5:da:72:e2:
f3:c7:fc:76:e7:6c:7d:5e:b4:37:4a:11:f9:c3:9e:
8f:b7:94:ef:e6:87:08:0e:45:53:ca:65:6f:35:90:
57:30:65:da:8d:c6:75:70:02:eb:f2:76:48:d2:b9:
f0:c8:21:76:c5:46:53:b9:db:b9:f2:3f:d6:b4:7c:
a4:fa:b8:d8:aa:d7:5d:19:18:3b:09:6a:93:9d:2d:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:BC:ED:F5:65:76:7A:99:9D:4A:18:67:BD:3B:12:68:CF:31:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e9e27e-6438-3cfd-bf28-4aaacc2bac2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:f3:e1:ca:f6:b8:58:0c:de:9a:67:f1:6e:fa:c8:1f:95:fe:
49:bc:b0:25:4f:66:a7:23:99:92:c5:af:d3:43:57:c1:10:2e:
66:8e:32:80:15:0b:5d:4e:18:ab:ac:b1:a0:09:14:7d:c9:de:
9c:3a:aa:4d:48:03:16:09:c1:c1:83:64:4a:8d:c3:ee:6f:7d:
46:82:9e:03:76:54:09:2e:df:5f:83:c8:4b:57:8b:5f:6d:1a:
b8:15:2b:a6:e0:f3:c9:cd:6b:93:58:8e:5a:88:94:c7:63:72:
14:72:43:b2:75:c8:51:a0:dc:19:3c:ae:17:01:45:c2:99:54:
f4:05:31:c9:b2:db:da:9c:84:5d:c5:e8:c1:64:25:a8:6c:64:
98:6f:3b:7c:de:b7:4a:93:a2:54:f1:1d:e3:06:1b:fa:ac:5b:
28:63:3b:bd:85:0c:fe:4a:e5:53:8c:51:4b:a5:01:67:8a:14:
c9:49:70:c5:b3:cd:8c:cb:ce:c6:7e:a8:29:f5:1c:42:e4:cc:
4f:c2:22:1a:35:f5:30:4f:4a:88:7e:d7:b7:6a:13:d3:7d:c1:
e6:36:1d:a9:30:6b:fe:6c:e8:53:fb:f3:40:0f:cb:15:43:b5:
a0:08:ff:ad:91:2b:d7:9f:aa:f8:4c:68:82:ac:33:8b:c3:ea:
80:aa:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:14:23 2026 by rpki-client