
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
File: 305f28da-be5f-3a06-b9df-40c6e00684ad.roa (raw, json)
Hash identifier: Zn1O0evaDLMKGY7MyRkTTZ6mZDQ10h+zgV8X0F2TjGc=
Subject key identifier: 7F:EA:32:1C:7F:3C:13:71:88:B3:15:31:EC:35:7A:AE:BB:36:DB:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0ED23CD5EE2A6A8F451F0780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 36621
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:3c:d5:ee:2a:6a:8f:45:1f:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=cac5425f-7893-48bd-ad59-62bce69d3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:fd:b8:0c:d1:61:b1:fa:9e:d3:74:33:11:
62:e0:d4:a9:d8:30:84:0b:21:85:c5:0a:01:ea:9b:
bd:3f:5e:18:43:98:10:f0:a1:1c:2d:e3:7f:b7:b5:
c9:7d:c8:05:ce:da:82:77:fc:36:af:26:ce:f4:56:
a8:6d:85:a6:54:cd:e0:ac:66:a1:63:b5:44:13:db:
71:1a:1b:0b:7e:8c:33:10:80:4b:77:dd:bc:46:d3:
2c:75:9b:f4:5e:7b:bc:65:41:92:a1:21:36:2d:f0:
fd:f7:c8:83:e3:62:79:04:75:81:33:76:50:57:88:
fc:61:86:ea:33:86:ce:29:62:7d:6e:d7:45:fe:45:
4e:e8:72:f5:4d:be:65:20:41:99:6e:e9:df:85:fe:
25:75:94:b0:f8:3d:39:56:63:46:c4:d1:38:50:13:
d1:45:41:66:62:56:c2:e0:65:4a:9f:28:de:38:50:
b6:eb:67:55:93:43:e9:c7:88:38:4d:17:af:d4:a0:
5c:2b:4c:ab:a3:23:e4:dd:78:d6:ed:c8:18:e3:f0:
6f:8f:3d:65:df:b4:aa:71:68:87:8b:4b:34:f4:0e:
fd:42:35:21:98:49:21:11:9a:30:1c:61:9d:61:27:
bb:11:f5:bd:e8:b1:53:0f:21:8e:2b:81:32:ee:36:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:32:1C:7F:3C:13:71:88:B3:15:31:EC:35:7A:AE:BB:36:DB:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:85:03:8b:d3:80:d9:fd:88:e5:dd:b5:81:f4:0f:b1:7c:a8:
27:e0:b6:78:d1:ff:d4:b8:7a:96:ca:c1:c2:78:49:4d:a0:7c:
ac:18:5b:a5:00:e4:e8:95:bd:ea:a6:eb:5d:8e:4c:59:df:ec:
a3:35:8e:37:bb:fa:f8:90:3b:54:a7:e9:53:69:32:41:4b:f6:
df:8a:f2:26:e1:4f:14:ea:c8:41:cb:07:0a:ba:32:3e:2e:4d:
1d:cc:5c:57:2a:48:82:b6:51:b0:3a:d0:96:85:9b:08:be:b9:
e2:a6:6c:b5:5f:fa:82:41:63:1d:50:8a:b8:c6:62:b7:de:29:
86:99:bd:47:05:dd:3c:ee:ce:58:f3:67:fd:cc:cc:3a:22:68:
b5:ff:81:1d:eb:26:8b:10:9e:80:b4:d9:46:e7:2b:e2:4e:c6:
a3:d5:b2:21:f1:bd:4c:6d:29:3f:27:0e:c5:b3:ad:05:94:f9:
a7:08:25:16:09:95:22:e5:13:8f:1f:3f:d8:99:60:37:80:b7:
08:b2:ef:ff:55:5b:5a:31:dc:9d:1b:3f:d8:22:1a:26:e0:a1:
1c:1b:6c:7f:fc:b1:b7:39:0d:6d:c0:21:c3:55:00:fb:c7:8f:
87:fb:ad:f7:6e:47:e6:de:9c:5c:00:cc:db:2e:76:7d:1e:d7:
57:d3:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:31:10 2026 by rpki-client