
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bcd71d-6bbc-3bb7-b57c-d24514bd012b.roa
File: 28bcd71d-6bbc-3bb7-b57c-d24514bd012b.roa (raw, json)
Hash identifier: xFEFBxfyr/F9eRFwlqCW+/NoJwmMdn0xQIwke54M6bQ=
Subject key identifier: 63:96:51:59:60:74:0A:C3:F1:AB:CE:BD:70:2D:9A:73:93:5C:DC:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC7B9BD0C07BAAAED1B1480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bcd71d-6bbc-3bb7-b57c-d24514bd012b.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 396541
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:b9:bd:0c:07:ba:aa:ed:1b:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=461a784d-c921-4a52-a1f8-e2faaf6da94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:0c:01:1a:cd:3f:51:b7:a4:e9:22:2e:12:
68:62:cb:41:d3:dd:84:68:d3:f2:ae:b8:3b:bf:c2:
48:4c:0c:a1:6b:19:9e:ed:99:8e:26:c7:ae:63:15:
7b:fd:2a:4b:1d:37:0f:ce:db:01:fc:69:6e:7e:b1:
68:ab:dd:14:59:4d:9b:f4:48:e9:d9:a1:38:7c:4d:
50:b1:93:3c:c4:d5:16:0a:6c:91:5c:d4:f7:c7:e6:
9b:ad:d1:a4:5e:8d:80:99:43:48:50:1e:81:91:ed:
89:32:69:1c:8e:57:17:c1:23:e3:0f:18:23:39:3c:
f3:b7:9c:f5:ed:5c:d1:ac:52:c0:23:85:37:0d:8a:
35:6d:bb:05:a7:ef:77:65:c2:06:da:dc:67:94:be:
b1:4d:f4:21:15:d3:50:d5:2d:bc:c5:e1:68:9a:8d:
83:64:ed:bf:bc:e4:c9:6f:87:bf:c9:17:6c:fb:99:
02:22:7e:4e:73:83:8b:7c:bb:cb:45:e1:cd:0a:4b:
c5:5f:f8:11:2c:c5:22:da:e5:68:37:ca:1c:3b:a8:
1d:91:be:0f:b2:48:31:d6:35:e6:7b:6f:21:58:fb:
ef:03:b9:c7:eb:57:81:84:6c:f5:f4:d0:66:52:51:
f3:13:14:94:92:d6:1f:ce:06:cf:64:18:56:5d:f7:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:51:59:60:74:0A:C3:F1:AB:CE:BD:70:2D:9A:73:93:5C:DC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28bcd71d-6bbc-3bb7-b57c-d24514bd012b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:67:59:e1:61:c7:4a:0d:44:e2:23:46:b6:84:25:54:12:5c:
e2:75:c6:8e:d1:d4:20:54:14:d7:b4:ca:fa:f2:a8:54:8b:4f:
de:cf:12:a8:16:f2:ac:41:5f:0b:aa:86:74:b0:37:f0:30:de:
56:b7:25:d2:77:56:c3:6c:bc:b5:52:e7:1a:41:4f:28:ca:20:
f2:a4:53:79:71:8a:2e:70:6e:35:57:05:e4:1b:4f:c5:d1:27:
e4:e5:0c:52:26:0d:8c:3c:2d:e8:69:a7:a1:9b:82:a2:ab:00:
1f:f0:e4:3e:85:40:e4:6f:c2:ac:a1:e9:67:69:5c:f6:ba:e9:
d3:14:d1:74:80:1a:32:42:41:ae:42:8d:55:02:8f:08:03:4c:
a3:11:56:95:ff:7c:85:39:d1:b7:57:03:49:3e:31:3f:ab:06:
5b:09:63:43:30:8d:99:a2:56:83:80:e1:c9:45:d8:2a:ec:f3:
5e:24:59:77:55:4c:d4:5e:cc:02:4e:58:b8:1a:0a:4f:48:39:
b9:21:73:d3:34:97:15:d9:19:e7:e7:e4:b9:1c:cc:a2:38:65:
c0:64:bd:9a:a0:da:c7:c2:15:cc:36:b8:3f:8a:3e:20:2c:02:
e5:5d:75:09:c4:c2:82:bf:e4:58:ea:26:86:62:01:5e:bb:c1:
26:50:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:17:51 2026 by rpki-client