
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e4b09f-7b3f-3642-9136-863d8bcac695.roa
File: 43e4b09f-7b3f-3642-9136-863d8bcac695.roa (raw, json)
Hash identifier: jsgtEfo+DuNaFW53Cb6/qxC/iEwMpVFqhPu1njONfMM=
Subject key identifier: 17:D0:E7:60:DB:C7:60:B5:23:95:D0:AD:29:13:01:C9:50:12:44:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1897BE92963FBE1FE63DA340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e4b09f-7b3f-3642-9136-863d8bcac695.roa
Signing time: Mon 07 Sep 2026 13:00:12 +0000
ROA not before: Mon 07 Sep 2026 13:00:12 +0000
ROA not after: Sun 06 Dec 2026 14:00:12 +0000
asID: 7342
IP address blocks: 2001:500:ed30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:18:97:be:92:96:3f:be:1f:e6:3d:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 7 13:00:12 2026 GMT
Not After : Dec 6 14:00:12 2026 GMT
Subject: CN=19d80ee6-03e5-4fca-ab21-c3d121ec8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:3c:3d:d3:bb:4d:c7:bd:99:92:dd:76:24:
a7:81:38:6d:1e:9c:6a:c9:e6:a0:58:a1:76:92:1f:
f5:83:fe:eb:90:8d:ec:d4:63:14:a3:cb:2d:e8:ba:
a6:7b:9f:aa:a2:5f:bd:cb:23:bc:47:e0:b5:c4:48:
b3:ac:68:b7:29:5e:5a:8e:2b:0e:7e:2d:46:df:bc:
50:f5:67:3e:db:c4:2b:80:aa:9a:ab:8e:fb:0c:a2:
dd:1d:50:d0:44:ce:fe:de:c8:52:5d:b1:9a:cc:01:
88:ec:df:d8:ea:c7:ba:13:c0:7f:71:a6:a7:83:41:
88:ef:da:6c:ec:f0:93:ed:b5:a3:22:0b:36:6f:6d:
22:5a:7f:c2:ad:3f:31:84:76:6b:6d:2f:10:79:fb:
ad:dc:c1:6e:8a:9b:cc:ac:23:99:c4:04:00:a9:4a:
e9:40:5f:55:3f:9e:2e:4c:ab:9e:bb:4b:5c:40:c7:
f9:60:e2:80:ad:74:18:b1:1a:a9:10:13:bf:73:2c:
3f:55:91:39:78:09:6b:34:6d:98:f6:c8:ca:d8:7a:
7c:55:a4:6c:84:8f:87:a7:14:c9:00:8b:bb:d9:43:
94:f5:09:95:cb:7e:cf:ae:d3:45:a6:2d:0b:4c:57:
ef:a8:b8:b2:25:e1:2f:21:bd:66:c9:05:ec:b3:ab:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:E7:60:DB:C7:60:B5:23:95:D0:AD:29:13:01:C9:50:12:44:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e4b09f-7b3f-3642-9136-863d8bcac695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:ed30::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:1a:de:ac:71:68:97:a1:70:7a:70:6f:66:24:5a:59:4d:96:
3d:7f:f1:ba:f2:42:15:c4:18:3b:e3:b6:57:d8:66:eb:02:2b:
2d:44:6b:30:6a:bb:aa:f8:06:72:08:f5:8f:28:20:d8:ff:b0:
e1:32:3e:c3:9a:02:88:8e:a3:65:89:25:15:ed:34:ed:95:9e:
2c:1a:b9:71:e0:53:4e:3e:0e:bd:f2:9d:f6:ed:ac:b4:91:c0:
2f:1b:c9:31:90:ef:c3:23:03:92:3e:35:f2:ff:85:69:ac:02:
b3:c8:3c:6d:49:f3:89:27:e7:be:28:ff:c4:26:80:85:71:dc:
d3:c2:a3:c3:9f:d1:1d:58:29:d5:b0:38:98:43:ad:4b:61:49:
68:87:a2:16:f9:a8:7e:b4:be:6e:54:a1:9f:c4:69:db:50:21:
04:6d:72:c3:39:08:25:d0:e6:47:01:42:5e:80:30:ed:a5:ef:
04:17:78:51:e9:64:6f:cb:a6:8e:8b:ba:0b:07:3e:6d:47:19:
a5:51:4d:c4:06:4e:e8:51:21:ec:19:fc:69:5b:02:da:30:aa:
42:e4:ae:93:15:ed:52:9c:9b:e9:81:78:5d:df:f0:98:e7:60:
e8:d9:de:95:91:71:9b:75:9b:30:bd:ab:96:9a:55:d8:d8:6c:
a9:8d:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:18:36 2026 by rpki-client