
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
File: d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa (raw, json)
Hash identifier: 49X8KC4V/fPB1k7MD5PRYunY4Ro/XhBchP9Ms8OJPp4=
Subject key identifier: 1C:03:76:FC:C0:6F:41:CA:9E:64:BA:59:39:69:9A:30:89:31:D8:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF18216F45769486F31688280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 396576
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:16:f4:57:69:48:6f:31:68:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=b4d1cb21-f69b-4d39-8081-c5a15d6becbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:84:c9:a0:88:66:2a:48:d3:18:2f:5f:d9:
d9:19:14:1c:64:1c:a0:e5:ca:71:fc:ee:bf:4b:e1:
d2:1f:df:99:51:8b:94:41:6e:6a:18:8b:c8:2b:67:
ce:e5:ec:3f:4d:4c:1e:6b:8c:8a:5b:6e:72:48:85:
ad:66:58:29:4f:aa:48:67:6f:89:f8:49:84:f5:68:
77:d6:e6:2f:05:1e:0a:c1:6e:d3:54:d8:7d:9b:66:
0c:40:c4:2f:31:cf:15:3d:2f:2a:22:7e:c7:f0:4c:
0a:7e:6a:4c:a4:93:45:65:79:45:37:d6:58:02:f6:
f0:24:a2:83:6b:59:d1:02:5b:bd:6d:11:47:7b:42:
bd:2d:45:d5:54:0b:5e:21:e5:26:c7:05:60:76:07:
9b:41:8f:f9:ed:73:1e:70:d0:e0:76:b7:d2:fc:e5:
a4:b5:59:96:2e:0b:67:ff:f6:09:a8:ae:00:b7:9c:
dc:73:7b:84:53:9b:ef:a2:24:0c:7f:c6:59:d6:1e:
b5:08:12:22:83:97:df:3f:3a:4c:0f:ae:47:c5:85:
6a:c7:b9:27:73:b9:0b:ce:6e:ba:2a:cd:96:83:a2:
b3:e2:ed:52:aa:c5:71:41:9a:3d:33:a5:02:a3:9f:
1d:dd:75:16:75:5d:15:f4:a2:5f:d8:77:05:e0:87:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:76:FC:C0:6F:41:CA:9E:64:BA:59:39:69:9A:30:89:31:D8:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d59ec5cf-a1af-33dd-be11-2fe46bc71cb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:bc:bf:d2:75:69:bf:77:81:f7:82:52:90:b2:81:79:49:a6:
e8:86:8a:d0:ba:58:90:80:9f:22:48:a9:93:24:78:31:8e:ff:
4a:24:7d:83:c6:78:3f:9a:d4:8c:16:30:e9:fd:b6:07:dd:62:
5c:bf:cf:b4:5d:71:3a:44:4a:09:5c:1c:75:68:01:d6:eb:95:
77:9f:f5:a2:26:b7:3c:1c:a7:a7:1f:6b:79:76:a6:27:88:62:
79:c3:5c:19:fa:c0:a6:37:74:4f:df:51:a9:e4:f9:9a:cb:fc:
33:29:54:9e:50:63:f9:83:ce:9e:47:51:ce:9c:34:7d:73:d4:
9e:26:26:1b:27:96:93:ea:5c:dd:86:fe:a5:24:61:7e:1d:87:
47:fe:8e:23:e1:24:68:cc:6c:8c:9b:eb:99:8f:72:01:5b:39:
e6:a4:55:10:f9:d3:94:9b:68:f4:8e:8b:c6:46:2b:bc:95:9c:
6e:10:b1:92:25:77:56:2d:79:03:cf:b9:a9:e9:12:26:ee:5e:
94:78:78:71:50:9f:31:02:eb:19:09:db:ea:75:46:5d:ac:97:
49:ad:e0:12:db:49:5e:8f:1a:5d:88:db:4b:5c:9b:06:56:65:
b0:d9:eb:2d:17:e7:04:8f:0b:7d:f8:a8:68:c1:01:e0:71:b9:
f6:80:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:29 2026 by rpki-client