
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa
File: 5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa (raw, json)
Hash identifier: hZ+hRi3NRrGqRKXyOJfmrolHXPFmW98POoQXykwfxEs=
Subject key identifier: AC:0C:C0:D1:F3:1F:FF:2A:0B:E7:20:4C:BA:89:FB:C3:D5:27:FA:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A782173F4ABBDF7CDE5670
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 396552
IP address blocks: 2001:500:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:82:17:3f:4a:bb:df:7c:de:56:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=f12a27d6-b37c-46db-9577-e4dc84e9402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:e7:1d:d7:c9:5f:7d:93:83:81:bd:69:f8:
f6:98:3c:07:af:3a:06:ed:64:5d:0f:90:39:e1:3f:
75:56:14:5a:e9:c0:2b:30:44:ef:56:34:90:db:80:
40:c5:9d:47:2f:d3:10:af:db:e8:70:87:94:fc:af:
79:35:6d:9a:5c:7b:55:0d:57:be:78:5d:da:f8:2c:
4e:73:62:37:24:70:f4:54:e1:88:db:91:fa:41:c1:
e4:c9:82:19:81:c2:7d:12:e9:60:f5:ae:2e:da:24:
13:16:de:4a:fd:5d:4d:9e:96:0a:74:3d:6a:bc:94:
8e:f4:37:44:df:24:04:9f:34:ab:d0:f8:7a:2e:4c:
19:8d:dd:9e:2f:8d:62:99:6c:0e:f3:04:ad:c6:62:
b3:af:e7:f0:61:fc:c2:fc:f3:8a:4d:6b:30:cb:ea:
32:28:cc:8c:3f:95:25:e9:5a:2e:d1:f9:3f:56:9d:
b5:f7:ce:69:b8:ff:9f:dc:10:83:20:e0:91:16:00:
bf:31:45:b8:d8:46:92:d0:7b:f2:b4:3a:07:76:bf:
01:d6:b4:66:d0:21:ef:d7:61:21:38:d3:da:c5:9f:
47:c5:bb:f6:46:2c:68:03:52:18:4b:00:e8:7c:05:
4d:28:70:16:d6:1a:db:e7:11:60:27:e4:95:38:70:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:C0:D1:F3:1F:FF:2A:0B:E7:20:4C:BA:89:FB:C3:D5:27:FA:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5856dfc8-bc2b-397f-85f3-7d2ac08a0af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:e1:16:42:3d:85:f4:f6:ef:c1:84:d5:b9:45:6a:76:1b:73:
25:da:ef:5c:76:e1:ed:ab:53:76:07:14:95:21:d5:49:c2:6f:
c7:bb:3e:e2:94:2d:c6:66:8b:fb:36:0a:4b:c6:ee:da:ce:a9:
37:28:ef:77:ab:a4:5d:c6:4d:4e:9d:60:cd:af:49:7e:91:62:
e4:25:d1:a7:be:33:d0:4e:95:e2:d9:43:cb:31:58:e1:5c:e6:
8d:6b:25:32:6a:06:36:a6:31:b0:87:b9:1f:51:43:e7:8f:9e:
37:00:e5:47:cb:44:a8:82:e9:18:c8:0b:e3:56:a9:ec:69:1f:
fc:27:6a:1e:3d:05:f7:24:40:a2:16:71:03:ea:78:ef:f1:e8:
e0:b5:af:c3:ea:44:24:60:f0:c7:3a:45:dd:b6:84:b5:c9:9f:
51:7f:a5:57:28:2d:60:05:94:a8:41:6e:0e:bd:fd:c7:ea:f6:
b8:91:da:3d:f9:e2:23:06:b7:01:76:33:de:23:8f:ba:9f:47:
5f:98:ac:31:bb:d1:8e:d5:28:c1:53:22:0c:a1:76:19:60:87:
18:3f:b6:5e:a4:34:ce:1c:9b:45:3e:c2:3a:3f:7b:39:d5:52:
4e:f8:c1:ba:b6:13:71:e0:3c:2c:84:1c:ff:b3:c9:dc:92:1c:
11:d3:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:29 2026 by rpki-client