
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b3ff74d-8824-3db0-a183-e9a1aec9764c.roa
File: 2b3ff74d-8824-3db0-a183-e9a1aec9764c.roa (raw, json)
Hash identifier: 5n8K/v5o7EEx6f/oTOHdTtoHO4ZmPoU2CU/LMx5aO3Q=
Subject key identifier: 57:2F:45:2F:E3:08:51:82:7F:F9:EC:72:6E:44:38:48:D4:FA:D3:EB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F11A1516356DDE74CDC680300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b3ff74d-8824-3db0-a183-e9a1aec9764c.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 396555
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:51:63:56:dd:e7:4c:dc:68:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=f6c50666-aff3-488d-b105-1b6559bd1c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:9a:c7:35:2a:69:0f:6e:64:2b:70:72:87:
26:db:e9:09:7f:bb:11:58:65:9c:52:02:12:61:da:
23:5b:a0:dd:d0:b5:81:53:29:3e:52:41:ba:02:77:
86:36:f0:82:08:dd:1a:f5:38:64:c5:e5:da:f0:90:
47:a7:24:ef:15:3f:ee:88:69:c4:9d:83:50:fc:4a:
33:8b:fa:eb:4c:d6:bd:cf:df:45:5c:7d:95:52:40:
07:26:43:35:50:57:b6:e3:16:c4:ee:1a:41:0e:a5:
43:4a:9b:86:25:03:e0:42:45:79:4c:35:7f:01:30:
0c:2c:ac:d1:7b:b0:4c:6b:b3:f9:c4:c8:43:dc:44:
26:6a:95:f2:08:ce:7f:66:58:59:77:11:a2:26:dc:
71:33:10:04:a3:0c:a3:e0:96:82:02:c9:8e:db:c1:
05:b2:43:ba:90:3f:f3:15:81:59:9b:22:f4:86:84:
87:ec:a0:c4:b4:d2:fb:78:d0:69:c2:43:ce:b3:b9:
31:a1:b0:18:bd:20:92:7d:4c:90:b6:3e:55:e6:38:
20:04:c3:65:02:79:b8:f2:cd:54:30:15:f1:20:57:
26:44:b0:9b:50:c2:a9:d5:b9:e7:01:d0:88:9f:2c:
22:e2:7d:5b:21:37:72:c8:9f:3c:79:04:0d:6d:80:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:45:2F:E3:08:51:82:7F:F9:EC:72:6E:44:38:48:D4:FA:D3:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b3ff74d-8824-3db0-a183-e9a1aec9764c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:05:95:85:1f:de:9a:29:83:ea:c4:f8:a1:ae:bd:08:6b:35:
51:91:44:e8:4f:66:0d:39:6d:0b:d0:9f:3a:ce:fa:bf:35:ce:
c2:28:24:eb:ed:a1:b2:2f:50:5e:a9:f1:37:ad:fa:df:51:22:
6e:3a:9c:dc:31:50:38:ee:34:6f:92:5c:4d:17:fc:f7:41:ad:
1b:5c:16:c6:04:6c:d7:66:b9:9d:d0:0b:d6:f3:a1:f1:4e:ac:
3d:57:df:da:db:b3:e4:1f:c4:f8:08:a6:ef:40:ba:85:7f:d9:
f5:9f:63:07:d6:6e:e5:ca:a4:c2:77:fa:de:67:f1:dc:cf:f6:
f0:be:bd:10:b1:46:6a:4a:6f:47:ec:5c:4f:15:ea:c3:6d:f5:
ec:76:2a:74:93:81:25:da:1a:fb:a2:58:23:9c:33:38:8d:00:
14:69:22:8c:7c:d4:27:00:89:2a:0c:2d:a7:1e:03:f1:4c:f2:
57:17:89:2b:66:c7:fc:88:0e:a0:55:eb:a6:a0:fe:39:e5:09:
f4:0c:e5:9b:a2:39:d2:bc:9b:cb:4f:e8:33:66:bc:f6:78:53:
35:bf:dc:ca:b4:64:e2:49:3d:b5:6a:aa:00:f4:08:72:6b:90:
59:49:af:c3:09:58:44:49:3e:9e:20:78:85:d3:57:a1:0c:9b:
fa:fc:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:45 2026 by rpki-client