
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
File: 40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa (raw, json)
Hash identifier: AbduAozWYEDVmbg6+pJx2uHyo2LPpFUVlMWTAwrYvug=
Subject key identifier: 82:36:2F:3C:35:F7:45:B6:D5:1E:1A:1B:CA:BE:37:84:CE:59:B1:EB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC7B94A20CFFFCF8052EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 211369
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:b9:4a:20:cf:ff:cf:80:52:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=1a92ac3a-4273-49e7-8a85-2593110f99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:85:b4:e1:72:db:13:1e:6a:50:24:40:15:
36:cc:2f:de:7b:54:25:56:6f:13:e7:ad:42:1e:e1:
00:3f:14:a9:d7:4e:c0:cd:89:05:26:cf:9e:9a:2f:
9e:d0:8f:42:e4:92:65:29:56:c0:fb:69:6c:53:e4:
07:3d:a2:06:a7:53:1f:0e:2b:22:76:57:2f:b3:22:
7e:3c:f3:b7:49:69:d5:0a:33:6c:3c:a9:b8:ba:5f:
d7:11:03:3c:c9:16:27:53:f0:9f:98:76:7f:25:fb:
c7:b4:4f:0e:2a:7a:96:fe:70:8e:f2:f0:88:f6:85:
80:8b:2c:c4:68:fb:d7:16:67:59:d0:8c:b2:15:a8:
29:61:af:58:e2:a9:a0:3c:be:05:8e:6f:97:aa:c9:
70:e1:fb:7a:c5:79:50:83:46:2a:35:43:f2:1f:eb:
b0:9c:31:4c:04:c8:28:38:05:e7:96:2e:94:e3:db:
16:eb:af:01:cf:51:36:35:3c:a8:f1:de:aa:f0:e3:
a2:75:80:0d:ee:9d:8c:4f:c6:61:11:2f:02:5c:8d:
da:cf:b1:79:4b:21:65:42:ab:e2:1d:8d:66:fd:5f:
e9:78:5c:80:24:b4:2c:94:45:30:d6:9e:b9:56:d5:
d5:22:32:e4:d0:2c:2d:8c:29:5b:e0:18:0d:dc:2d:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:2F:3C:35:F7:45:B6:D5:1E:1A:1B:CA:BE:37:84:CE:59:B1:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f0:32:41:3a:a6:b6:22:ef:3f:fd:38:08:e2:4d:be:d1:90:
f3:ff:98:59:71:3f:39:b7:74:eb:5b:2f:ea:85:4a:7e:cc:8a:
27:c2:54:3f:36:3b:a9:58:4c:1c:4b:3f:c1:bc:89:4a:29:4a:
07:df:da:7c:ca:09:e2:3e:59:11:1e:ec:fa:18:b5:07:ff:f6:
0e:80:f0:b8:50:be:c2:c3:9f:17:67:ad:7f:a8:ed:27:a2:53:
bd:8a:0b:37:0d:08:a4:83:31:9c:dc:ec:89:bb:65:50:af:98:
86:50:95:77:82:ec:b5:d4:bf:05:d4:47:25:d3:00:2b:f8:4d:
c5:21:39:f9:46:f4:52:e6:1b:28:2b:f5:f0:1c:41:0b:b7:a7:
13:b9:8c:a7:bc:24:6e:35:f8:36:4a:24:7e:17:5a:94:b4:fc:
9c:b2:6a:44:e9:6f:5c:a4:df:96:29:4b:36:4c:c5:79:f3:33:
b1:27:2a:f5:60:c4:ca:3e:e4:4c:ae:d7:90:61:16:53:dd:c3:
cc:5c:64:4f:b9:12:f8:0a:37:c3:20:66:05:da:22:c4:18:d4:
be:87:7f:ea:5e:3b:7d:1a:5c:66:63:9c:98:45:f0:d7:86:27:
5f:1d:55:f0:bc:69:7b:4c:75:6c:e1:15:69:d6:64:fc:8e:de:
ef:77:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:36 2026 by rpki-client