
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
File: 3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa (raw, json)
Hash identifier: LFAPmmH4tQH7fYksWUH7h670TAhk4atoFrfUFBZW9WM=
Subject key identifier: 39:69:DE:79:CD:62:07:23:F0:22:89:DB:9B:78:19:04:42:C9:1E:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F093CFBE379ECC2DD70406F04
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 36625
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:fb:e3:79:ec:c2:dd:70:40:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=74428f48-55fb-4b92-b761-67c288b394e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:60:6a:0c:29:2b:ab:e2:af:6e:c9:27:6c:
14:e1:c2:f7:5a:83:b5:72:b5:b5:0c:b0:7b:91:88:
a6:f9:c2:4e:16:9f:b6:83:48:90:d4:5b:d8:5e:a3:
c8:6e:b0:d3:38:1f:4d:6a:d1:88:f5:ce:79:a3:8d:
ab:5c:d2:69:e8:a5:96:8c:ce:65:1b:ca:29:22:be:
79:4f:b8:1e:5c:17:52:06:68:c1:12:63:41:77:cd:
f2:28:91:62:a9:51:65:ff:08:fd:6e:2b:6b:a8:c1:
d8:a7:5f:48:0c:6c:d8:62:d5:bc:fd:d8:40:16:86:
40:26:ab:94:99:85:37:94:a3:0b:b9:92:f8:74:a2:
ee:44:a7:21:b9:5f:27:d7:1f:f4:03:42:92:eb:23:
ce:95:19:97:32:bf:ed:09:fd:8e:a3:63:5f:f8:61:
5f:27:92:2c:fe:ea:bb:c4:85:11:d5:1e:df:ec:d9:
d7:78:e3:7d:3a:c1:59:e3:2b:59:8d:a1:51:c3:ab:
94:0f:db:96:05:ea:0a:d6:79:f9:72:a9:61:d0:4b:
c8:4d:d7:cb:d3:db:2d:3a:ca:d3:66:1c:e9:93:a9:
41:08:65:b1:d7:47:55:d9:4f:a9:9a:e5:54:35:43:
dd:26:e2:f3:4a:90:3a:35:11:b7:39:09:85:ba:9d:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:69:DE:79:CD:62:07:23:F0:22:89:DB:9B:78:19:04:42:C9:1E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c0:a8:d0:e6:c4:ce:d4:f5:1e:16:a2:a7:c9:7b:29:a6:d6:
6d:d8:0f:61:58:4a:89:2e:03:9e:f5:64:c9:f9:c6:a2:7b:62:
fc:b4:d9:9f:49:6b:91:d3:06:24:14:d5:ae:e2:71:e3:a3:0c:
3b:7a:af:49:0f:e1:58:90:8e:d5:29:bb:8d:a7:86:f6:93:ce:
11:80:32:3d:b0:8c:f4:64:52:41:00:00:f0:0e:d6:db:65:44:
2a:ba:1e:a9:03:e3:0b:47:61:62:49:93:18:16:be:d4:ad:60:
c1:dd:3a:ae:8b:67:7f:2a:59:97:e0:b0:cb:e6:8b:82:95:07:
de:4b:d4:7d:76:5e:3c:c2:a2:08:a0:3b:65:6e:6d:d4:13:47:
a3:25:6b:ab:bb:ba:25:bb:10:51:b0:ff:1a:6c:e2:38:b8:d4:
38:d0:22:7b:46:b2:3b:5e:dd:2b:d1:ed:0a:85:fb:6b:70:f5:
21:bb:98:60:11:73:a2:da:82:38:88:ef:c5:d2:1d:87:6d:11:
75:5e:fd:1c:9e:c3:b6:4e:ee:56:f1:42:f2:4e:ea:43:ee:39:
7d:d2:cc:ad:a8:a6:94:8b:14:8c:3e:95:a8:4c:78:57:fd:eb:
ab:ef:3c:a7:ac:9a:49:6e:e4:93:1f:fe:58:e1:53:36:d2:9e:
30:2d:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:54:38 2026 by rpki-client