
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa
File: a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa (raw, json)
Hash identifier: NP02t2y4yxWvBF2a6chAbP0q7fMzBNEJZPUq/Rz90x0=
Subject key identifier: 7C:CA:08:CC:F7:77:69:00:13:DE:D7:6C:63:ED:7C:2D:8F:68:7C:32
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA7906283DE9DAC8EAD113800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 25485
IP address blocks: 2001:503:d414::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:62:83:de:9d:ac:8e:ad:11:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=70e252b5-ff2f-42a9-94b8-77f07d2afa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:9d:6a:02:4a:d1:3f:3e:8f:24:ce:6b:f4:
44:c3:0d:2d:4b:12:45:bc:5c:c2:27:d1:d2:b7:c3:
ec:1e:0d:5b:29:1b:f4:56:3f:ee:3c:a2:83:4a:c5:
a1:ec:c7:f7:e8:39:c2:fa:74:0d:7f:6d:b7:a5:d5:
ba:02:3c:1a:89:a7:49:3b:56:52:9e:e9:71:05:5c:
ba:9c:79:71:1c:a7:a4:6a:d9:9a:9a:b6:49:cc:70:
6f:aa:b9:92:f5:3d:77:6e:69:2a:92:ff:b8:c6:3d:
2d:af:fe:f1:f6:f6:c3:f3:22:17:62:ed:c1:c9:e5:
ae:9c:e3:65:bc:e5:78:3f:fc:c8:9e:ef:2f:36:98:
05:90:7b:51:84:4c:62:46:74:ee:37:c7:81:0d:0d:
63:f8:d2:e9:14:7e:02:94:48:8a:dc:9a:93:df:1f:
5f:f7:e7:96:0f:e8:f0:ba:96:71:d1:e3:ab:3c:9e:
16:83:67:de:ce:c2:d8:d4:be:fc:0e:3f:fc:df:e4:
89:52:7b:1c:63:f3:0f:e7:79:37:20:cd:b1:22:23:
e8:a1:53:f2:98:67:7d:04:95:76:8d:03:45:82:db:
b4:e2:3f:23:eb:cd:c7:6a:77:20:39:42:76:2c:61:
db:4a:20:95:b7:b6:71:9e:ed:3c:1d:30:96:b3:b6:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:08:CC:F7:77:69:00:13:DE:D7:6C:63:ED:7C:2D:8F:68:7C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d414::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3f:97:2d:66:d9:84:04:36:61:29:d5:74:2e:b7:29:3d:b6:
3e:e1:95:12:4b:0a:ca:cb:ab:89:f1:08:51:00:a4:fd:89:9f:
c9:6e:3e:ee:7b:4e:33:de:88:44:1d:c4:f8:b9:e0:52:39:bb:
e0:74:13:09:9e:7b:1c:87:0f:72:73:ad:66:33:a1:23:9b:2d:
9c:aa:2f:8a:95:db:0c:51:99:a8:dd:a0:68:ad:7d:db:58:56:
1d:2c:cc:31:f1:99:0a:9f:7a:25:99:46:fe:29:2f:a6:c2:97:
16:aa:a5:9e:5b:c8:f4:cf:0c:50:e6:0a:59:96:fa:45:63:9e:
3f:96:e7:a4:65:c2:6c:7c:60:f9:cd:e3:46:b2:b0:5d:b8:8c:
4b:68:e2:57:f1:89:48:e9:fd:72:3e:aa:5d:67:11:36:84:ae:
c2:fa:9f:be:7a:92:4f:06:f3:7a:d6:69:86:bb:12:74:08:9b:
ad:3f:36:01:23:7b:4f:f7:ef:2b:46:7f:df:2d:5a:cc:b6:24:
46:bd:5b:aa:2e:3f:ef:42:38:1d:c2:7c:63:d1:5d:7a:ae:6b:
f6:79:30:bd:24:74:a5:d2:cf:2b:67:c3:7b:25:09:f5:82:12:
dd:ab:45:cd:41:6a:31:e3:e2:79:75:da:0b:1d:42:d8:c4:46:
fa:db:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:15 2026 by rpki-client