
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa17568-d42e-3563-a824-48d15750387e.roa
File: 6aa17568-d42e-3563-a824-48d15750387e.roa (raw, json)
Hash identifier: RYM+dEYIarvX3uSfcbC47tJ9KGUCpKnuagz+s2HKhUg=
Subject key identifier: BA:0D:84:9D:DB:BA:FB:9A:A7:3E:A9:FE:63:B5:30:57:7C:80:F7:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0672921979BF8A5F360D4E90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa17568-d42e-3563-a824-48d15750387e.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 397205
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:92:19:79:bf:8a:5f:36:0d:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=53a1b0e3-565e-4a96-948d-5bcb3b066bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:11:61:fb:a2:d5:cd:16:05:96:9f:9f:17:
e0:4d:52:ea:6f:47:de:e1:26:15:8c:b8:f7:61:ff:
69:c7:a7:48:2c:b7:c0:d8:be:77:af:2f:31:46:d5:
3c:9a:4d:3b:b2:3b:fc:df:8f:2b:1d:65:8e:ad:2b:
59:e5:d9:77:94:5f:34:e1:6e:31:23:f0:0b:0b:bc:
2c:17:c5:7b:e0:a5:25:f4:f3:c6:a6:61:3e:e5:25:
d8:f6:99:75:90:42:b0:22:35:08:c6:51:01:52:68:
66:50:ef:1d:0c:63:a3:4e:0b:5e:db:60:a0:89:37:
9b:9e:31:4e:3d:97:0b:25:80:14:07:b6:41:58:4b:
51:13:3e:0a:6d:ad:aa:9f:93:98:bb:8b:52:c4:77:
87:51:d4:80:10:cd:5c:31:3a:b2:6c:7e:74:d2:6f:
18:67:11:ea:38:06:07:55:2b:e5:59:e4:f6:b7:67:
60:f7:2f:5d:f3:be:19:38:40:65:05:e3:c0:2a:e2:
f7:ae:58:98:f2:7e:25:9d:31:33:42:ed:cd:cd:9d:
7d:c6:53:5b:3d:d2:43:63:c8:76:b1:58:4e:d7:20:
a6:27:94:f4:3d:c8:0d:66:0b:70:7f:a4:fa:f9:18:
14:86:8e:ac:08:8c:df:17:b3:61:1e:1a:27:48:ce:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:84:9D:DB:BA:FB:9A:A7:3E:A9:FE:63:B5:30:57:7C:80:F7:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aa17568-d42e-3563-a824-48d15750387e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4f:92:18:31:d6:6c:e8:cf:00:2a:56:57:d3:b1:bf:ff:e1:
f2:99:96:d5:60:f2:5f:bf:fd:21:be:10:34:e3:b6:55:34:ba:
98:5f:9f:60:28:ea:6e:aa:72:14:02:c0:a7:4b:38:b9:98:c5:
80:87:d1:10:66:50:a9:53:7c:4e:7c:26:42:78:b2:f0:b0:07:
f3:7c:2f:17:72:af:b9:17:51:23:20:98:98:d9:43:9b:a0:e4:
2b:77:9f:bb:94:34:03:23:90:9e:01:e0:10:82:89:72:08:38:
a2:ad:70:cc:f0:b0:56:51:46:89:1c:71:ea:03:01:83:70:b0:
b3:8a:b3:11:82:87:58:68:51:eb:41:5e:63:d9:d1:9f:b4:b0:
01:a3:90:8a:07:ee:ca:fd:f0:a8:2b:95:b0:f6:e3:0d:78:8d:
45:f2:a1:d9:8c:9d:6e:7d:cd:a7:f5:67:f8:32:78:cd:38:50:
49:dc:b1:5d:0b:2b:67:ea:e1:3d:ab:28:50:a3:04:cf:e2:25:
15:45:ee:d2:13:77:f4:ac:23:88:59:ff:e7:c7:31:c3:d6:ce:
87:4d:64:b9:12:a4:f6:16:b2:65:a3:25:f4:40:e8:e3:e0:1b:
1b:6b:0a:98:9b:90:7c:b0:50:61:78:05:0d:52:e6:e5:82:d0:
03:e7:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:10:44 2026 by rpki-client