
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa
File: cf36a253-64f4-31a8-9c96-c596b5a948e6.roa (raw, json)
Hash identifier: SzJDTkLIsSPA0GQmxAlX+nZICgOao3ubFvM17XFw0kU=
Subject key identifier: 7A:7B:56:CE:C6:03:7D:2A:2D:0E:64:0A:3E:98:78:55:E6:6F:92:79
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4986B6ABDE92365826CE6B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396540
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:b6:ab:de:92:36:58:26:ce:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fc4dfb93-b797-460e-b5f1-eb159005dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:5c:9a:67:60:f4:9d:62:6a:8c:4f:4c:5c:
19:2d:d9:fa:bf:01:49:2e:d0:59:05:ac:d2:e6:bf:
9e:f6:4a:8b:7c:69:71:ed:f1:18:4a:96:7c:9e:82:
9a:89:de:49:41:fa:8e:68:09:f6:7a:d6:a2:c0:73:
cb:63:3c:7b:42:65:09:ec:3e:41:18:da:53:86:de:
72:8f:3f:85:37:b0:db:29:1d:9d:e5:24:a3:3c:6f:
17:d4:1a:b9:dc:69:33:0d:33:5e:29:39:28:0f:bf:
ef:cc:00:ab:54:d2:98:5b:9c:08:05:99:9e:0b:de:
c1:71:05:9f:60:94:c2:d2:f4:74:93:7b:37:81:31:
71:b7:c0:c2:d8:63:f7:d9:f6:cb:9b:b2:f1:dc:8e:
66:6a:8b:bb:8e:b4:b9:1e:d8:71:ac:82:25:08:20:
8d:14:8f:62:af:ed:fa:8e:1f:f0:e7:4f:bc:14:5b:
2f:25:1e:9b:13:be:0a:c4:ff:d5:26:64:90:85:6a:
1b:bd:ae:2a:67:42:a2:ec:bc:e4:28:83:d1:a6:00:
5c:f9:03:29:98:a0:d9:b0:9d:87:d6:0a:f9:39:fb:
f6:40:71:a0:b7:c5:1b:17:b5:cc:2e:cf:34:ea:e1:
5d:fe:b0:28:67:df:dd:b1:18:f8:e6:28:65:a8:d9:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:56:CE:C6:03:7D:2A:2D:0E:64:0A:3E:98:78:55:E6:6F:92:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:df:ab:b9:3f:8a:4c:f2:76:fa:2b:bc:0b:44:37:55:03:ee:
cb:be:b5:04:cd:0e:51:e3:eb:13:b2:20:00:be:2c:80:33:8a:
87:f7:02:22:4c:38:85:1c:e8:83:9b:11:61:0f:47:00:56:89:
c4:20:ca:60:04:af:e5:4a:06:75:1d:ea:8b:29:ae:01:82:a2:
f2:f1:87:ac:f8:df:c9:cf:51:01:45:c9:a6:71:7f:13:4e:f6:
82:10:00:06:6c:f2:c3:e1:db:96:20:21:98:eb:76:b7:c9:f5:
d9:00:d5:dc:c6:95:fd:3c:68:44:fb:9e:12:65:cb:dd:99:88:
5c:4f:f6:34:15:51:e0:24:40:45:7f:29:8f:bf:8e:d7:19:3d:
d0:01:bb:84:3b:41:c6:6d:c6:9c:c2:3e:9f:f6:1a:21:99:37:
3a:f9:50:2d:af:8f:3f:50:e1:d8:f5:55:37:81:82:99:93:4c:
4a:c2:39:bc:7b:81:3d:ef:1e:55:4c:3a:1c:ef:e1:6e:6f:f2:
73:8b:89:e9:dd:a7:a3:58:ef:bb:31:bd:98:9a:fd:34:c3:2e:
6d:8a:bd:b1:d0:49:5b:9b:0e:90:88:6c:d8:fe:2d:6b:06:4c:
31:06:15:58:cd:d5:8d:78:df:c4:b5:38:34:39:5a:a4:bb:54:
d5:1c:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:54:30 2026 by rpki-client