
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa
File: 28dd1550-c898-38f5-ba14-7855cf1747c5.roa (raw, json)
Hash identifier: v6BSGMHAedmxloEMw8eD/2fRogUUQ6fPj6W/IGUOEAk=
Subject key identifier: 7F:72:2D:AD:2B:BD:87:25:9B:6F:50:C0:4B:5B:23:A9:0B:7A:1E:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA793A805EE91336E60329D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396564
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:a8:05:ee:91:33:6e:60:32:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ef9c908b-8ec1-497d-8e50-802009d70d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:78:ea:72:22:bb:fa:5d:61:3d:cf:1a:9d:
bb:83:df:18:5b:2a:32:52:8c:5b:17:4c:74:b7:b7:
01:89:07:52:5d:55:44:c9:23:d8:5a:0d:1b:5f:48:
4a:51:b8:12:10:73:db:9c:c9:5e:30:f6:84:2b:06:
33:36:ae:b2:2e:f5:6c:bd:e5:61:ec:2d:af:ae:92:
39:50:2f:e9:5e:64:68:9d:f8:37:95:0a:86:e2:92:
03:02:c8:23:1c:e3:11:65:f9:d9:38:d6:14:68:e8:
fd:ed:7e:e1:42:d6:ed:95:9a:48:e0:0e:07:50:1c:
28:71:12:0b:68:44:c7:97:73:1a:62:d6:d0:b2:d2:
b7:22:ca:08:3b:72:3c:58:ae:63:65:f5:09:83:61:
c9:e6:13:dc:47:37:c0:4b:43:1b:c4:f0:fd:5b:ca:
c6:1b:b6:37:74:16:7c:a8:ad:0f:32:ad:ad:e4:20:
f5:a2:53:85:2f:ae:07:00:79:88:04:4e:0b:47:8e:
94:f9:3b:95:5e:2c:fe:16:a6:ff:a4:00:f0:2f:a5:
be:b9:a2:60:d8:af:86:ce:e3:04:43:f2:07:bc:ae:
c4:ae:f0:74:ef:0a:34:56:c1:b9:a1:d5:15:1f:c1:
a3:e4:d9:65:48:9b:72:99:c8:66:14:6b:e0:be:cf:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:2D:AD:2B:BD:87:25:9B:6F:50:C0:4B:5B:23:A9:0B:7A:1E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2c:79:ff:ee:1c:64:31:7e:17:a3:52:3b:c7:85:82:55:4a:
cc:45:fb:2a:eb:78:0c:70:7c:2f:90:e9:15:6e:5d:91:4f:c0:
7d:56:7b:f6:c8:43:6d:a8:80:75:22:4e:64:35:99:59:91:86:
fa:5b:8e:be:ee:0b:ec:11:a2:96:91:41:e3:57:c1:03:94:ac:
e1:3b:b7:ff:16:0f:fd:82:32:9e:57:af:32:c2:be:c2:10:85:
f6:e6:8e:30:35:ec:a4:20:19:d9:e3:73:9c:84:dc:ee:33:5b:
ad:d9:87:49:44:95:0f:24:75:c5:09:ba:1a:93:c6:99:89:74:
44:8c:27:d4:66:74:7d:83:01:3e:56:a5:aa:ae:7e:4a:ac:53:
fc:29:32:ba:fc:23:99:a9:12:a1:b3:09:d6:51:07:f3:13:a1:
74:9f:02:ad:eb:5e:ab:16:1a:ac:6f:2d:0f:6a:9c:d7:ab:87:
1a:9a:3e:70:ab:10:e3:c1:22:ac:dc:c7:47:b8:38:a8:3e:ee:
30:2d:17:09:f0:ef:94:44:f2:a0:45:8d:1e:c0:8e:32:c8:b8:
84:db:5f:99:4a:72:6e:28:ea:b6:d1:7c:3a:ca:8e:26:bc:93:
17:d6:31:22:1d:a9:f1:5c:e0:d2:27:7e:51:0d:d5:c5:70:a2:
fe:c9:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 04:21:28 2026 by rpki-client