
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
File: 42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json)
Hash identifier: DmAiJ4ZDiNgy2Pqc3VyDFjWL0ygvUzomuZXGSZBzOzM=
Subject key identifier: 18:32:D3:E7:59:0E:EC:CA:D9:AA:41:F9:A0:70:06:ED:E9:23:05:10
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F23C2827DAC662A8058AEBB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 396584
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:82:7d:ac:66:2a:80:58:ae:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=e0f044e8-b26d-4371-b36b-04a33a53e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ca:ce:9d:a4:10:3f:62:98:d5:49:9c:34:e6:
d9:70:aa:d6:d8:75:62:f9:6e:53:3a:64:00:15:48:
ee:5c:c6:90:70:31:d9:90:59:b7:79:bd:6a:bc:10:
6d:09:2d:6c:5a:9d:b7:da:94:01:5d:c8:1a:1b:74:
80:82:bb:be:d3:de:cd:22:52:50:1a:2a:13:9c:59:
9b:24:d6:4e:54:c0:b3:c5:a8:40:8a:64:d9:04:eb:
79:06:09:22:12:b2:10:8c:6d:cc:42:d9:47:11:88:
e0:d0:8a:49:ea:9b:09:03:bb:67:59:3f:3e:58:27:
12:98:65:98:cc:5c:e6:f1:79:f9:e7:90:fc:f2:55:
e6:c0:b4:61:f9:6d:a8:03:03:03:23:be:79:f5:cb:
71:a3:ae:55:6b:0d:a1:77:4c:da:e3:49:f8:40:33:
e7:35:87:d9:04:d2:be:65:05:fc:14:ee:2a:aa:f1:
2f:0a:01:2a:31:2f:c3:db:e6:a4:bb:8e:23:f3:6e:
1e:6d:a4:8a:dc:57:f5:23:21:35:9d:e1:1e:09:7d:
34:bd:79:64:64:c5:ca:6c:df:09:51:52:29:af:36:
cf:11:eb:f1:c2:7b:c5:73:bd:ec:d3:dc:c8:90:c4:
4e:76:bb:26:a5:5a:6c:b6:99:15:54:b0:aa:71:fc:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:D3:E7:59:0E:EC:CA:D9:AA:41:F9:A0:70:06:ED:E9:23:05:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:1d:d1:81:b5:46:56:d3:e1:b7:53:37:43:36:ab:77:86:59:
60:ea:10:cb:1c:64:a7:cc:25:5b:d4:7c:e1:5d:c9:cf:81:c4:
b4:f5:61:46:0e:4f:5d:8d:4d:bd:bf:91:1a:3a:2b:47:f6:b3:
e1:64:02:83:59:b8:4e:86:1b:f2:de:2a:eb:47:f1:5e:85:8e:
2c:e4:47:b1:9c:0e:9f:a3:38:77:92:ad:7c:d2:fc:4a:0d:c3:
a0:5f:eb:4a:7a:9d:e9:03:ec:21:b6:92:2d:d2:09:78:b3:cf:
f5:ac:e9:d0:de:95:a6:12:42:fb:99:f7:ca:1b:01:37:a0:a8:
c5:69:7f:00:1a:c2:e3:f7:8d:cd:c1:e3:69:5d:15:03:d6:e0:
84:08:9d:d8:fc:b4:67:f9:2f:6d:c2:5d:48:82:48:bc:c0:f8:
82:1d:60:22:74:81:58:52:af:80:6d:e3:2f:4f:01:d9:16:7b:
8d:4a:d5:ea:9d:55:3d:19:8b:94:a8:9a:88:7a:82:e8:66:78:
14:ab:08:cd:9b:c3:d4:18:da:33:f9:11:97:28:66:0c:82:88:
04:dd:fc:cd:6f:f7:83:1c:70:a0:91:24:e5:b8:ab:2d:1e:92:
99:75:dd:89:ab:fb:f5:fb:20:53:02:66:de:b4:50:81:45:5b:
e5:dd:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:12:17 2026 by rpki-client