
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c76a34-ee88-3f50-809f-701a272f3e29.roa
File: a8c76a34-ee88-3f50-809f-701a272f3e29.roa (raw, json)
Hash identifier: pPInlRec3nCVoGCOfyAe8GHSS7De+rDREnKmtamdVdM=
Subject key identifier: 88:36:C5:1C:24:ED:7C:19:E2:69:B5:02:2A:D0:A4:FE:98:79:6D:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4972A8D2E216D940A4E16C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c76a34-ee88-3f50-809f-701a272f3e29.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396612
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:a8:d2:e2:16:d9:40:a4:e1:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9db4567f-666a-431e-a9f7-973401a523bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:ef:be:74:72:fb:be:77:b8:e7:27:17:70:
5d:aa:63:3e:ee:c2:c3:75:f8:a0:fd:71:1e:9d:89:
80:73:ee:9b:95:dc:64:4b:b4:1c:1d:4e:33:2e:a8:
08:a7:e0:23:86:23:d9:c7:26:39:82:af:be:49:ea:
06:85:a9:a0:2e:43:d4:c5:ef:b2:c9:84:89:69:9c:
e9:ee:9f:1d:aa:77:61:7e:33:9a:81:7e:dc:58:34:
be:f5:65:3a:5d:4a:bb:9b:0f:47:67:7c:3e:9a:ce:
19:a7:41:cd:99:d5:fa:ce:74:d0:02:26:1d:74:e5:
8a:49:d0:69:c8:b8:ad:14:7b:4c:28:01:65:79:c0:
9c:f9:84:79:5d:bd:66:33:87:31:08:18:5c:d5:bd:
4e:a2:af:f6:d7:c5:6e:6c:70:bc:fe:d1:d2:5f:f2:
28:27:c2:33:23:58:a3:87:8a:1b:49:69:fe:5a:8c:
ec:f4:b8:94:e3:56:4e:f2:a5:59:bf:a3:a4:12:96:
c4:98:b1:6a:ce:b0:67:de:80:ac:45:2d:31:b5:0f:
06:cb:a7:2a:7c:52:16:92:9a:58:5e:14:98:05:18:
62:8c:5b:49:55:73:9a:98:6c:b8:c2:fe:76:50:fc:
bc:ec:30:41:d1:81:30:c5:ed:f1:5a:f6:06:ed:4f:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:C5:1C:24:ED:7C:19:E2:69:B5:02:2A:D0:A4:FE:98:79:6D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c76a34-ee88-3f50-809f-701a272f3e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:5b:ab:fc:90:64:19:5c:05:5c:4c:e1:b0:d6:85:de:c9:7c:
e1:12:fd:6b:cd:d7:c6:8d:36:88:7c:97:9a:90:cd:81:df:29:
78:15:ac:8e:a7:09:cb:e9:fb:8e:f2:57:0a:54:35:ca:b2:d6:
79:fc:7e:2e:83:40:54:78:73:33:1f:dd:79:ae:1a:8f:da:16:
b4:7f:09:ce:4c:ab:7a:59:75:2a:37:a6:07:53:d5:25:13:e4:
47:bd:ed:ec:6e:49:65:b9:05:51:c9:7f:7f:41:a6:ef:d9:82:
d0:bd:c6:fb:ff:ce:c1:24:6e:7e:33:b4:82:a5:fb:af:83:26:
5e:27:94:48:33:19:c9:ea:59:d0:96:4b:9b:bd:2a:b2:2f:cb:
b1:78:b1:8d:5c:4e:07:70:43:00:49:bd:e5:74:3a:13:ff:71:
38:4e:2a:c5:51:ea:0e:8c:82:5e:77:e2:6c:a4:88:db:d8:61:
02:df:6a:11:5b:a9:0e:e5:f8:50:39:43:bc:32:43:63:6b:ab:
e4:2a:d7:eb:b1:38:bd:b2:22:85:7c:4c:1d:0f:69:b6:91:ac:
92:84:1a:9e:6f:23:06:af:38:14:4e:22:44:f7:5a:72:dc:6a:
c7:74:fc:60:7e:45:d8:5b:bb:0c:ea:91:d7:55:5d:44:6f:d2:
fd:c8:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 06:29:22 2026 by rpki-client