
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef45eeb-eebd-3825-add1-296837f20d31.roa
File: cef45eeb-eebd-3825-add1-296837f20d31.roa (raw, json)
Hash identifier: LFcOXoXN+xt6YwlBX+7lpByAaSCsIT/vJYasVuxgtcQ=
Subject key identifier: 28:E2:28:B3:A2:6B:6F:41:FB:9C:86:1B:E8:68:A8:AA:0C:72:AA:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498B460BC2874D0A92FCB600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef45eeb-eebd-3825-add1-296837f20d31.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36630
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:46:0b:c2:87:4d:0a:92:fc:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c66b6c3a-1e94-4897-b1d9-d489a2cf36d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:3c:5b:5e:e8:24:d9:90:3b:54:a5:e8:d2:
40:75:2f:b7:1b:b2:39:42:32:52:63:12:8e:bf:b0:
42:99:cd:31:37:a3:be:37:4e:0b:d2:37:db:50:f2:
4c:d0:46:ab:12:8a:88:47:69:1a:8d:be:ff:94:cd:
d2:3a:11:dc:31:c3:8a:5f:ba:2b:d8:e4:e1:3e:a8:
dc:60:9c:54:30:b2:ec:fd:a6:00:19:a6:f9:46:9b:
73:91:1c:2c:b1:00:ee:da:c9:12:c9:99:24:15:54:
d2:e9:9f:57:8f:ef:61:04:27:76:fd:05:54:bf:9e:
6a:4d:d4:55:b2:79:5b:56:6d:47:f1:4f:30:1d:d0:
d4:11:1a:1f:e5:a8:32:27:12:db:66:87:f9:df:45:
df:68:2e:30:15:62:7c:41:28:5b:56:bc:47:a8:27:
82:f3:5b:e1:80:34:06:56:96:d8:45:f8:24:d8:aa:
fe:8b:d1:7c:a7:ce:d4:b5:e2:2b:b2:3c:9c:e0:b3:
f4:38:15:72:25:2a:2a:2a:57:7f:9d:a3:b2:6b:66:
6d:64:6b:1b:01:a8:00:86:85:56:ad:80:ac:43:ef:
3c:ee:54:25:a5:99:13:72:6d:a2:90:ff:bb:06:80:
f6:32:40:72:d0:b5:1d:ba:34:19:0a:fa:f3:28:b8:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:28:B3:A2:6B:6F:41:FB:9C:86:1B:E8:68:A8:AA:0C:72:AA:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef45eeb-eebd-3825-add1-296837f20d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:87:8b:4c:a8:17:22:d6:57:c9:9f:5f:4d:ff:fa:7a:7c:8a:
11:11:64:25:23:3d:9e:a4:26:7a:70:f7:7c:32:1f:dc:3b:37:
aa:54:ec:ea:50:1f:c1:fe:6b:c5:80:16:29:e6:59:2a:41:ac:
27:e6:ff:be:eb:4e:6d:1f:36:c2:10:37:d0:87:78:02:ac:0b:
a2:58:fc:f4:42:55:c9:1c:8c:bc:89:17:71:77:86:8e:ce:9c:
f4:c9:e5:a7:1c:08:7c:8f:64:00:71:3e:5d:19:11:a3:ae:b8:
fd:a6:1c:49:9d:88:e5:5c:5e:dd:ca:44:51:7d:31:5a:fa:01:
16:cd:b1:bb:b8:2e:e6:4b:c4:60:f6:ee:75:52:4a:e9:26:d6:
cf:b1:7d:02:ae:bc:5c:f3:0c:9f:74:b3:d5:62:5c:61:2f:47:
cf:ab:6b:00:d2:f6:c0:10:9b:b1:94:b7:69:eb:7e:bb:45:93:
fd:03:ae:f2:be:9f:42:fd:7d:5d:e2:51:da:40:9a:88:29:3f:
e2:3d:a9:4b:92:56:32:86:4e:84:ef:88:80:6f:6f:40:10:34:
fd:11:75:c4:2b:4c:a6:a0:5b:62:b6:fc:a9:c0:50:ba:5f:db:
9c:a3:b3:98:5a:12:7e:c0:c8:71:a1:2e:f8:03:c6:ea:7b:30:
d0:a0:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:16:39 2026 by rpki-client