
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c141f6d6-8ad2-36e4-a6d0-22b805f4ba63.roa
File: c141f6d6-8ad2-36e4-a6d0-22b805f4ba63.roa (raw, json)
Hash identifier: 4grA6P04mnoMyoEXyoZ36H3iSP0nFPIlEQzHXa2tEOg=
Subject key identifier: 5F:9D:CF:C2:2C:2E:EA:AD:C6:83:A2:7C:F1:52:F7:81:99:F2:0F:7A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498B69E1BAD54D5D405F6780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c141f6d6-8ad2-36e4-a6d0-22b805f4ba63.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40647
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:69:e1:ba:d5:4d:5d:40:5f:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cc44a5df-a106-4d44-88ef-654c373908f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:ec:88:ec:e5:51:f6:20:95:39:fe:aa:b3:
cb:9c:0c:3b:b3:ac:24:5b:7d:55:26:6b:11:6a:df:
07:64:25:be:dd:7f:b0:6f:dd:c5:32:3b:64:85:9a:
f9:61:ab:4f:33:a1:da:eb:0f:68:5a:5d:31:b6:47:
d6:99:a7:93:4b:a5:8e:e0:6b:f9:fa:3b:b5:16:97:
25:42:b2:0d:83:c4:fe:71:20:a8:d4:24:b9:71:a6:
67:bf:68:1a:d4:da:5f:52:94:f5:cf:4e:0c:4f:eb:
4a:2c:8e:fe:aa:a1:d1:d5:7e:47:11:c4:e9:30:ce:
00:f0:72:cc:da:07:ac:d2:97:5a:4a:53:66:90:85:
9f:92:67:1e:ff:f3:55:65:b3:2f:a8:3c:3b:41:40:
cc:75:c7:44:1e:7d:b9:ee:7e:a6:7b:3b:ae:01:06:
08:42:65:3f:75:cc:e2:6e:56:fb:b1:47:61:cf:e7:
91:93:0b:8f:f8:6c:f6:ef:1b:bc:a4:7d:0d:f2:f9:
f4:dd:8a:57:ca:73:57:d9:07:0f:b1:93:0d:6c:43:
3c:26:56:3d:df:4a:79:cc:c2:57:4b:71:80:e3:80:
8e:0f:e3:63:28:80:f8:d5:7a:c1:90:98:5c:75:89:
38:ad:7f:a8:bc:03:e2:19:b8:60:75:e7:01:12:61:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9D:CF:C2:2C:2E:EA:AD:C6:83:A2:7C:F1:52:F7:81:99:F2:0F:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c141f6d6-8ad2-36e4-a6d0-22b805f4ba63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c9:c0:6b:ef:3b:12:26:bb:2f:9e:2d:f6:8a:79:e6:94:79:
ed:0a:e5:11:7e:cf:e6:23:a9:db:d1:e0:cb:a6:5b:0c:68:70:
ed:f3:27:fa:b6:fe:c2:d6:7b:1d:0c:66:8b:30:7d:67:4e:bf:
fe:1a:35:11:71:b0:86:17:ca:7a:87:c8:1e:1c:10:93:20:0f:
4f:26:95:d7:4e:83:d7:62:7f:ba:2f:65:85:89:1c:f1:ae:52:
7c:19:76:bf:4f:81:48:71:69:8a:75:17:4d:98:85:a3:2a:75:
21:6c:22:fd:1d:51:67:91:ac:7b:18:54:c6:0e:12:61:ab:94:
2b:f6:41:c0:37:8e:09:ce:14:2e:fc:b1:fd:5e:90:6f:62:aa:
15:ee:53:08:d0:1d:f1:29:b4:0d:53:ee:c4:6e:37:36:36:13:
c5:c2:3b:84:d5:57:f7:0d:23:ea:fe:b4:f5:0c:d8:bf:4b:92:
63:70:a1:06:bf:c7:68:53:b0:f6:60:7c:0c:bd:aa:af:f0:a6:
d8:75:85:9c:ca:4f:4e:e8:c5:bc:47:a1:16:99:8b:13:26:0e:
7c:e1:7e:92:6a:80:f2:74:24:f2:a3:24:4a:fa:5e:12:f3:13:
0c:75:c3:cb:fa:f7:41:1c:67:20:80:13:d3:c4:d6:2c:85:ba:
ba:bf:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:27:38 2026 by rpki-client