
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab820848-8391-37ac-85cb-af550cfcd312.roa
File: ab820848-8391-37ac-85cb-af550cfcd312.roa (raw, json)
Hash identifier: +R2nX+scz7BRmmvarD2aiz9ONagJWjR4+mJN0u5NZto=
Subject key identifier: C2:88:48:15:F7:80:3B:38:D6:5C:50:8B:4D:DD:D3:72:5B:16:1D:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F5E62D2F0980436393C700880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab820848-8391-37ac-85cb-af550cfcd312.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 397197
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:d2:f0:98:04:36:39:3c:70:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=8189219d-1631-4a03-9320-54a8ec3c5b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:cd:48:9e:80:7c:bd:e5:6a:9e:43:70:90:
e6:86:42:af:16:c1:4e:ae:db:70:b3:fe:fb:cc:0e:
48:2a:d3:44:d2:ef:a3:62:41:64:54:da:29:ec:08:
d6:18:21:a4:17:a4:8a:2c:7f:31:a4:64:73:89:7e:
b8:18:e7:33:a0:95:2e:0d:1d:c4:b2:6e:a4:49:b9:
6d:8d:ac:a0:92:9c:89:68:4e:c6:ca:e0:d4:c0:5c:
ca:34:d2:fc:a4:28:40:d5:59:b7:33:af:b1:8f:72:
4f:10:46:c4:08:a4:45:b8:fa:c3:c4:53:af:a3:2b:
0b:6b:c2:7f:dc:4f:ef:26:83:ac:d9:f3:8c:a8:4e:
51:c6:42:ab:20:30:f2:f3:fa:0a:59:ec:7e:7f:23:
19:f1:fe:0a:e3:82:ff:b7:7e:b2:ba:87:e1:05:c7:
de:25:ef:cb:18:d0:c6:26:bb:29:e9:03:03:8e:37:
81:95:e6:1f:6f:81:45:98:ac:6c:93:f3:46:cb:16:
da:3b:1a:de:37:d2:6d:02:a7:1a:6c:02:6c:34:29:
d0:b7:eb:6a:25:b7:c2:94:8d:8c:26:02:57:e0:52:
65:48:a9:50:31:57:f6:fb:15:46:74:cd:0f:a8:ff:
81:e6:2b:5e:af:b4:6f:01:67:74:7a:3c:f6:3d:32:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:48:15:F7:80:3B:38:D6:5C:50:8B:4D:DD:D3:72:5B:16:1D:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab820848-8391-37ac-85cb-af550cfcd312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:1e:57:37:48:71:9c:5e:e8:47:a3:eb:83:63:9f:3a:f8:1b:
3f:e5:1f:5c:a5:1a:40:62:2f:1f:b0:43:5c:98:31:e8:35:6d:
3f:b3:c3:d7:85:96:4f:2e:d7:f2:29:c5:20:fd:00:19:1a:a2:
0f:e3:cf:2f:a2:56:b2:1c:52:9d:7a:3a:8b:ad:29:5a:60:ef:
fd:e4:3a:49:77:47:41:c1:56:4a:9e:8d:9c:f8:b3:b8:22:89:
dc:93:e4:ff:3f:93:5c:cd:b9:dd:fe:63:cf:99:b7:ae:02:67:
48:78:27:e8:6d:ed:51:91:05:0d:9e:28:38:1f:d6:4f:a4:83:
0b:b7:86:3c:f3:17:fa:3b:a8:f7:51:a9:bb:90:57:10:0a:8d:
0d:1c:f9:60:09:c4:db:9b:55:05:7a:cc:6a:91:26:e7:85:f1:
08:78:9f:b9:d9:18:63:d7:0a:dd:e3:ab:4b:b5:73:77:1b:7e:
af:71:09:60:bb:6e:c8:ea:63:c3:c6:f1:01:a2:29:18:35:cf:
04:ae:69:5d:41:60:03:c7:2d:ab:73:67:45:69:bf:bb:8c:16:
d7:2e:17:52:ee:9c:6b:1c:db:9a:fc:14:63:f7:46:ed:45:8a:
4f:52:fd:42:5b:80:53:d2:8a:bc:f4:7b:27:c3:ad:b4:42:20:
ea:d1:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:29:15 2026 by rpki-client