
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbe97710-c940-318e-9dee-4502313401b4.roa
File: cbe97710-c940-318e-9dee-4502313401b4.roa (raw, json)
Hash identifier: hEQH0g+g1/4yWEmbO6UUtM2eFSjFwMF2eFe93Dgx6dU=
Subject key identifier: 31:4B:56:BE:B5:70:3D:4B:9D:E9:39:DA:57:B9:46:C9:19:69:EB:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA793EEF5C5B18E421CBBFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbe97710-c940-318e-9dee-4502313401b4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397200
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:ee:f5:c5:b1:8e:42:1c:bb:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d66b0cbc-7a99-43f0-a97e-631226f8a58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:13:9d:dd:c0:15:dc:cb:c0:ba:c7:c7:25:
36:b4:d5:75:f4:1e:e4:4c:6a:6b:76:31:c3:94:3d:
8a:85:e3:e3:97:96:b5:c4:68:c1:f2:ff:e7:0f:1a:
68:11:59:55:d4:96:41:04:34:66:3e:6a:99:ee:6b:
b6:a4:f5:7f:50:c6:95:d6:aa:8f:6c:bb:e2:cf:cc:
b4:c4:5b:27:c6:9a:7b:b3:00:7c:04:17:61:3d:0b:
11:43:5b:e4:c9:a8:8c:80:93:cf:28:14:bc:0b:1d:
06:c5:bd:9f:80:a2:78:35:9c:a7:50:84:f3:65:d5:
71:13:b3:e4:4d:1d:80:ef:30:79:af:ce:4d:b6:57:
ed:ec:ce:b7:67:bd:46:b8:c6:77:a1:f5:a9:12:ec:
3e:1e:00:79:56:28:20:8e:a5:93:09:b4:d5:ce:df:
49:8a:98:65:fb:98:a9:e9:8d:9c:07:3f:ab:32:b8:
5d:eb:52:12:6f:42:96:5e:2f:7a:f3:8e:e4:6c:13:
c1:cf:1b:28:71:ce:81:45:62:63:00:5b:8a:bd:a2:
2a:cf:91:a1:1d:74:ef:4f:ab:6e:99:ff:47:76:e5:
e2:dc:e8:ff:b0:5f:df:67:3d:55:48:0a:3a:5e:0c:
04:9e:4c:0f:59:c9:9e:32:08:1c:8e:89:c9:cd:51:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4B:56:BE:B5:70:3D:4B:9D:E9:39:DA:57:B9:46:C9:19:69:EB:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbe97710-c940-318e-9dee-4502313401b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:46:27:00:ff:d9:af:08:42:d3:0a:71:a8:54:e8:1c:e9:13:
e3:95:f1:a5:53:c8:25:4b:64:4a:66:18:0a:88:a0:f9:d5:96:
1d:62:97:c5:06:6b:64:70:bb:00:cd:f4:01:88:00:73:aa:98:
a9:bf:de:27:c8:ee:8a:9b:96:7f:4d:66:fe:f2:71:df:11:9b:
2b:b6:93:ad:44:75:f9:de:6a:9a:79:b3:6c:bd:2a:63:f8:10:
b3:37:66:b6:c9:0b:95:2b:48:99:c0:30:21:0d:f0:ea:10:ef:
5f:fb:38:b2:3b:4f:3d:0e:26:29:7b:8a:ca:dd:98:e1:b7:c7:
1a:76:c9:26:d2:60:74:8f:b4:30:62:ae:1c:ce:9c:97:03:e0:
1d:0c:12:00:50:b0:ff:23:6e:9f:f3:c3:6b:00:97:e3:24:57:
b2:ed:53:07:8c:fd:88:63:07:2f:a8:0e:51:c1:a9:f8:02:e9:
58:9e:b3:b8:90:d2:e2:8e:6b:1a:60:c2:cf:87:00:b8:4d:a5:
dc:b6:eb:00:c2:94:22:67:09:f1:3c:c7:a7:cb:83:98:64:23:
64:29:ed:9d:91:f3:53:49:ee:1d:6a:fb:d6:7d:0f:5f:cb:90:
6d:22:a5:d9:54:06:7f:70:4c:03:81:ef:18:8d:a2:3c:e2:cf:
41:1d:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:25 2026 by rpki-client