
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa
File: c8406f43-0956-3a10-83a7-1a88bee01778.roa (raw, json)
Hash identifier: LPPCoMCje3ZRfouALt4jrb2si287HIN7+9BWnkbnjX4=
Subject key identifier: E1:00:71:1F:F3:C8:EB:29:0C:D0:E4:8D:02:77:8E:CD:70:61:43:13
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49863ABBCD091AA379B5AE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396572
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:3a:bb:cd:09:1a:a3:79:b5:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ac924213-b53c-435c-ae53-c8f857e16ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:47:a9:c7:b6:4a:53:19:16:4a:d1:2e:ff:
88:f1:12:b4:ac:42:e4:d7:f2:91:c8:03:27:b9:11:
9d:c7:59:3a:4f:ec:95:70:5e:8d:30:49:f1:d6:9f:
c1:af:d3:fc:4e:9a:02:84:60:2e:44:24:10:f0:c4:
97:0f:67:42:a4:6e:8f:88:10:6c:32:0a:79:32:11:
ad:24:62:93:70:cc:44:f5:ac:50:0c:a4:68:0a:65:
f3:b5:d7:18:39:cf:f9:b2:cb:03:78:78:3d:f9:74:
89:8c:db:76:ee:16:f2:4f:80:e7:44:4b:c0:9a:2c:
1b:56:0b:94:14:21:8f:72:f4:35:1e:a4:0f:d7:f7:
d1:e8:f0:f0:0f:4b:f9:ad:3f:33:28:85:72:4e:cd:
02:7e:33:47:6a:a2:ba:ac:3a:50:b1:27:e0:20:6e:
1e:55:b8:0b:24:1f:41:65:f3:1e:6e:12:bb:78:14:
51:f5:c8:f4:fc:cd:2e:98:1d:18:59:36:f9:9c:b2:
e0:40:04:91:f5:5f:a5:f0:86:25:74:9d:e1:d0:2f:
25:19:e8:5e:23:9a:96:70:88:c1:53:3c:54:e9:f7:
9d:fb:c6:15:3d:03:65:ec:22:05:4c:8d:ee:99:db:
29:a8:21:73:fe:72:f9:3b:ff:58:c4:89:65:20:1f:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:71:1F:F3:C8:EB:29:0C:D0:E4:8D:02:77:8E:CD:70:61:43:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:3d:6f:15:fd:8f:dd:22:af:6b:0d:9f:45:72:34:42:e4:26:
7d:fb:16:9a:f9:80:bd:9d:3f:0c:90:ee:c6:8a:77:73:d5:48:
70:0b:f8:a5:d4:bf:9a:46:5e:fe:24:3b:fd:b1:41:e7:f9:24:
0c:75:61:15:95:71:89:e4:0a:4c:58:37:ad:f3:fe:69:9a:3a:
c8:eb:ca:0b:9d:ff:cb:88:08:fa:0a:82:15:24:8e:a0:7c:fe:
bd:22:86:89:1e:70:ff:1a:ae:f5:8b:22:6b:22:db:4c:f1:8b:
25:4b:4f:0d:64:58:79:e4:51:cc:65:20:e3:6e:3a:e3:45:75:
2b:ca:6f:81:3d:f5:b8:e5:fb:3b:27:50:50:c2:48:0b:78:6e:
95:b0:82:f7:37:e5:07:aa:6a:4a:a6:78:47:f5:c8:a6:b9:74:
fa:75:c2:8e:68:af:1b:19:91:a3:18:d0:0c:da:67:86:13:df:
30:29:ef:75:84:6e:da:1e:8a:96:6c:d4:94:34:9b:8a:d4:3f:
5c:0f:25:42:8a:ed:3a:49:b8:40:df:94:bd:26:05:64:2e:5c:
ad:b9:b1:fb:f2:3e:98:62:8a:18:76:f6:cf:06:64:60:fb:6d:
3d:bb:dd:62:10:59:b4:fa:f6:ac:e0:28:b2:b3:5b:7a:b3:b3:
fd:34:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:48:12 2026 by rpki-client