
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b905d8f2-e1db-3d43-aa72-d66f6e739bab.roa
File: b905d8f2-e1db-3d43-aa72-d66f6e739bab.roa (raw, json)
Hash identifier: owgUayI253WNr6L9FoLVhPX4tZp81amvqKmWl7ZwB8Q=
Subject key identifier: 63:F4:F1:A3:68:EF:1A:A9:9C:D0:C1:47:94:6C:4F:24:5D:1B:5E:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC7990ECA26FFB2004A2960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b905d8f2-e1db-3d43-aa72-d66f6e739bab.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 396546
IP address blocks: 2001:503:a83e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:99:0e:ca:26:ff:b2:00:4a:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=2f2c6744-ba73-4218-b169-80f91fa30d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:78:c0:1e:da:df:75:b6:22:e4:6f:87:6d:
aa:84:9c:f3:25:d2:57:cc:af:b5:cc:1a:57:99:1f:
81:d8:a1:8b:4b:0f:1a:c3:3d:a7:da:8a:8c:67:bc:
d4:df:da:58:32:a9:ac:21:29:1e:07:67:aa:8e:8e:
04:8a:92:e0:6e:2c:4f:7a:84:a0:1d:71:3e:09:0b:
ec:d8:5c:06:54:3b:a8:c2:0a:35:8d:c9:c4:e8:11:
34:1d:5c:4c:f1:6e:23:27:f6:12:54:9e:01:38:0a:
31:d2:a8:3c:4d:27:99:9d:56:22:2a:44:40:ab:3f:
4a:d2:b8:c7:14:9b:c9:95:dc:c7:12:ac:84:06:64:
e2:ee:b3:49:82:d2:71:9b:7d:13:9c:b9:f3:78:b2:
ca:51:e1:4e:86:07:94:d1:97:c8:b0:29:87:e4:18:
cd:d0:5e:fd:5b:d9:66:7f:85:22:49:b5:be:cd:47:
67:cc:02:e6:63:b7:86:45:07:06:17:25:7e:ad:e9:
b1:18:ea:fa:46:1c:74:57:e1:a7:83:d4:b2:70:10:
54:0c:c4:61:ff:3e:a1:52:26:f0:32:5d:bd:2a:17:
80:d4:c6:59:97:3a:25:2d:c5:b7:c4:a7:e6:7f:04:
fa:eb:e6:b5:4a:bd:41:aa:40:be:0a:9c:4d:70:2f:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:F1:A3:68:EF:1A:A9:9C:D0:C1:47:94:6C:4F:24:5D:1B:5E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b905d8f2-e1db-3d43-aa72-d66f6e739bab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:a83e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:9e:21:21:dc:cb:82:50:a8:05:eb:6d:fa:66:cd:c7:92:09:
0e:85:e8:20:5d:8b:69:95:fe:5f:87:7c:d2:ad:f1:e3:67:ed:
8e:68:b4:3d:3e:3f:23:7a:5f:7a:f7:14:50:20:bc:a4:f3:56:
5c:3a:45:2e:fb:31:60:85:cd:eb:57:e4:9e:55:cd:ea:71:2f:
93:34:14:8b:14:a4:71:8d:99:df:05:2e:d3:ec:57:e8:42:6d:
c1:13:9e:92:07:7d:9d:d3:9b:90:11:18:c4:9b:6e:d9:e8:b2:
9b:3a:3d:1f:36:16:9f:f0:82:45:05:f6:9b:7f:77:8f:f4:b1:
4c:79:35:4c:bc:40:b5:15:18:b6:6a:ff:c8:60:65:2d:b8:78:
65:53:37:35:07:95:cd:cc:b6:55:0b:20:a9:bb:49:3a:d4:c6:
33:a9:2f:d1:23:1b:e7:38:fd:b9:af:ac:3b:af:6b:f8:27:6b:
7a:1d:7e:26:67:c3:a5:ee:23:ec:ab:49:36:b8:29:de:da:e6:
d3:3f:c3:a3:6a:66:63:ab:18:06:2a:d3:43:82:23:99:55:c0:
69:cc:62:a6:2f:a6:e7:0d:7d:9a:cb:ab:dd:af:8c:88:bf:9a:
1e:f1:09:89:8f:eb:2a:0d:c8:80:50:68:34:c3:98:0f:fb:5e:
53:5e:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:18:18 2026 by rpki-client