
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa
File: 8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa (raw, json)
Hash identifier: fPRg6w8OXgyaD64XCB5e+vnoZ3RCGeNRxGdyG0ktV3o=
Subject key identifier: 53:72:D4:8B:15:2D:4E:10:EB:0E:83:B3:BD:06:3B:E9:CA:20:F1:41
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06728558F832C7C950D43900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396555
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:85:58:f8:32:c7:c9:50:d4:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=39fcfa42-e4da-4a40-9db7-26d3ef8b8d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:7c:dd:34:a1:3e:83:50:21:53:1f:cb:5e:
70:ae:8e:c2:90:2e:4e:49:10:94:59:d7:c9:0a:a3:
e9:ec:be:93:b4:3f:e6:80:5b:d3:8b:2a:a8:ce:64:
13:5c:c8:14:92:5a:e4:02:a2:27:d9:89:11:0a:69:
40:67:32:40:e5:36:d6:b6:dc:41:5c:39:b1:b6:f6:
26:7b:37:bd:e4:6a:de:4a:9e:d7:dc:73:4c:a0:94:
c8:c6:8f:48:7d:53:6d:12:f9:1c:bf:e7:51:11:78:
17:7a:e8:93:2b:94:2f:87:58:1d:8f:af:65:04:7a:
17:60:3e:db:4a:78:5c:7a:9e:7f:67:29:2c:0e:70:
5a:20:d8:31:bb:55:51:17:06:d3:5f:85:8d:1b:e2:
34:12:a2:6e:5f:34:89:8e:66:0d:86:26:a3:1f:56:
02:87:28:6c:e8:53:14:e8:01:eb:69:4a:83:e5:80:
26:91:86:25:6a:5b:05:77:62:f5:2f:2d:8c:cf:62:
76:f8:49:00:ec:69:e0:5d:0d:9d:7b:7b:9a:2f:cf:
1a:93:36:54:c9:e5:c8:ab:08:21:0c:c1:0a:06:24:
ba:a7:17:ff:8c:fc:36:5e:62:b7:6d:63:3a:89:05:
33:8a:65:17:0c:9c:46:11:78:af:b8:2a:c5:80:b8:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:D4:8B:15:2D:4E:10:EB:0E:83:B3:BD:06:3B:E9:CA:20:F1:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:81:4d:6c:53:89:fc:54:dd:22:a7:2d:a1:12:90:2c:2c:fc:
ab:01:d1:33:76:6f:7b:9d:f3:de:f0:9f:e4:20:de:ec:65:78:
cb:21:cb:90:b5:2b:f0:23:16:e3:01:e8:c9:9b:65:b2:e7:b3:
8b:45:d3:73:ec:6d:a2:f9:1a:5c:31:62:46:80:7a:dd:a7:b4:
70:bb:8e:ea:33:c7:85:c2:75:cf:0f:ed:d8:0d:46:ea:51:ed:
53:e1:ec:be:9f:60:56:36:a3:cb:f0:93:78:cd:b9:5f:55:3b:
2a:52:45:e4:87:bd:45:40:5f:ee:40:11:f2:c5:1a:39:b3:5a:
e9:06:9c:59:1e:c6:e5:91:4f:91:09:82:f2:eb:09:8c:07:67:
9d:a6:b4:b3:33:65:38:04:c4:c3:9e:0e:de:e8:25:f5:e1:09:
dd:89:3c:2a:85:e0:cc:55:8f:aa:a6:cd:47:8c:5e:80:61:8b:
83:5a:f2:72:43:90:d3:62:1e:8d:de:61:99:3e:da:0d:5a:94:
93:95:fb:5c:9a:20:05:ed:b7:8a:42:70:03:7a:49:a1:09:3e:
49:34:9c:24:27:c3:9c:36:4d:ea:ac:c4:c0:3e:92:6a:93:c6:
ab:d3:49:0d:42:27:a6:2d:0f:42:c4:1b:c9:5d:44:fc:56:97:
0b:f1:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:59:02 2026 by rpki-client