
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
File: c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa (raw, json)
Hash identifier: 88He9Xqrmmpe2mrMKiR/Hta6LBtjM/0mBEz1Yvg0KAE=
Subject key identifier: E1:07:F0:51:19:5B:09:E3:61:9A:2A:F5:FA:8E:B9:02:81:C3:3D:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584FA85E236ABA537B775BC40F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
Signing time: Thu 29 Oct 2026 01:00:12 +0000
ROA not before: Thu 29 Oct 2026 01:00:12 +0000
ROA not after: Wed 27 Jan 2027 02:00:12 +0000
asID: 36620
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a8:5e:23:6a:ba:53:7b:77:5b:c4:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 29 01:00:12 2026 GMT
Not After : Jan 27 02:00:12 2027 GMT
Subject: CN=aa2fc838-8f31-4318-82e2-fca8f65cbcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:a1:df:e4:99:7a:30:1a:38:52:33:2e:96:
eb:ce:f0:2f:fa:2e:5c:47:4b:ab:99:86:47:7a:2d:
8f:03:ca:be:b7:73:6b:ec:37:83:a3:83:78:33:29:
16:df:01:e5:89:83:b3:34:3d:0c:d2:d1:9b:b7:a3:
20:83:e2:18:ff:4b:b6:18:38:19:39:47:59:7d:d0:
08:e5:eb:b9:da:79:92:5b:00:30:3c:fa:c1:59:87:
47:af:53:21:99:ad:bb:a5:74:4b:83:e3:d3:6b:49:
31:f2:71:b9:26:24:6d:37:17:41:08:d0:43:26:41:
b8:fb:e4:a7:eb:3e:99:5f:a0:7c:1b:9a:4a:bd:09:
f8:3e:e0:52:47:61:d1:86:bc:a7:a4:f8:ce:71:60:
8d:f7:56:1c:ce:08:88:ca:09:da:a0:41:90:02:39:
e4:33:20:f3:58:2c:fd:d4:b1:3f:69:1b:f9:1f:a4:
2b:a5:d2:cb:bc:cf:89:6a:49:5b:1a:bd:c6:56:a0:
f7:07:62:21:2a:82:ad:28:53:0f:64:54:cc:a7:7d:
da:a5:be:0c:26:2d:10:fb:16:c7:b0:9a:26:08:0a:
a2:29:09:53:bc:f0:3f:8d:64:42:6c:df:b8:0c:13:
87:5f:67:26:8b:87:20:1a:43:d4:92:05:de:b6:32:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:F0:51:19:5B:09:E3:61:9A:2A:F5:FA:8E:B9:02:81:C3:3D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7a:09:4d:a1:d5:fa:40:52:c8:93:d8:52:4d:3e:b0:60:8c:
5f:f0:32:19:45:de:0c:d9:c2:5d:f0:e5:61:c9:9c:df:5b:b3:
6d:eb:59:80:bd:db:74:37:5e:dd:f1:09:a0:77:8e:12:cb:af:
64:51:d6:c0:c2:0c:06:38:91:28:e6:b5:51:b1:96:15:5f:a4:
f9:48:70:18:a8:16:57:ff:5b:35:13:99:1d:a9:ea:07:9d:e5:
01:e8:1b:27:fb:76:05:67:48:22:e5:ef:dc:bd:a3:49:b4:1a:
7c:e5:2f:f3:50:c4:98:45:00:e3:43:1d:40:df:c4:bb:8a:ff:
85:11:ce:27:f0:8e:b8:93:12:23:d4:f3:6e:8c:ca:5c:ca:67:
63:4d:eb:36:fa:d9:39:cc:26:e8:03:54:09:90:a9:d6:02:27:
f6:1e:08:a2:9d:bc:06:4f:aa:66:e5:2f:e8:10:ac:19:37:b8:
60:29:19:64:92:d0:d1:79:ac:8d:74:88:30:16:e8:41:77:b0:
c2:c3:c7:e7:70:79:2c:58:8a:3e:b7:c5:2b:13:a4:5c:d5:5e:
d2:33:db:49:72:e4:f8:a0:f9:1f:ba:ac:e5:98:66:29:b5:72:
b8:e9:63:f6:86:fa:aa:33:d2:01:f1:45:27:05:fb:66:4e:91:
2a:d2:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:13 2026 by rpki-client