
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa
File: db00ca30-2df2-31ae-8ab5-410724cccc08.roa (raw, json)
Hash identifier: kIXfvAeI9UQH2bStuZWe5HAtBtDN9s5vsikjk3Qe6gA=
Subject key identifier: 51:6D:CC:F3:45:1A:BF:F7:98:12:EC:9D:31:D7:86:14:2A:DF:21:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49744C7ADC70A1841300E180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396549
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:4c:7a:dc:70:a1:84:13:00:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f9a2d64d-ff1c-48c5-bee2-585ff940c431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:d0:58:04:c2:63:0c:49:aa:aa:3a:92:f0:
29:cc:1f:d5:71:eb:21:b2:10:e1:8f:50:4f:7b:83:
1d:2e:12:95:cb:fe:3b:29:23:b0:70:5a:83:57:0b:
ad:17:3f:98:db:5d:f4:7b:96:22:62:79:2a:cd:c2:
4b:4a:4d:7a:86:51:38:76:25:74:96:61:04:38:81:
bc:5c:db:db:68:89:2b:3a:cd:82:4a:37:46:82:6b:
63:f4:93:86:97:aa:cb:ed:e8:a3:a2:c2:4d:36:7c:
28:be:2b:46:89:f8:4b:c3:dc:8b:1e:0a:15:19:cd:
48:cd:a2:14:40:49:60:ca:9e:e4:f8:ff:e0:45:50:
92:28:9c:06:08:80:f1:e7:08:b0:24:f7:61:6f:d9:
08:de:b0:c3:da:b6:8f:b3:d1:7a:d4:07:ff:4f:a8:
d9:c0:0c:3c:92:88:35:05:02:6d:a7:78:9c:98:d3:
23:30:79:29:e8:89:de:f6:53:79:42:f9:98:68:3f:
41:ff:c0:9a:be:16:ae:d6:17:d1:aa:f1:03:58:ea:
4d:9a:31:6f:26:e6:50:d4:86:32:2c:5e:54:82:ef:
d7:5e:09:40:18:25:bc:c5:da:14:62:69:45:dc:00:
a9:92:f8:d6:b5:a8:d3:72:19:7f:6f:98:e6:06:f0:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:CC:F3:45:1A:BF:F7:98:12:EC:9D:31:D7:86:14:2A:DF:21:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d8:c6:b8:96:a3:68:97:07:aa:3f:90:19:2a:2e:6d:d7:58:
02:20:63:1a:e7:59:63:f0:d1:bb:9e:00:74:ed:e6:bf:ea:7f:
ee:c8:1b:3f:cc:65:c3:ab:1b:52:61:5d:e9:18:85:ec:ae:a0:
6f:e3:fc:4e:39:93:d6:49:82:16:c3:3f:91:d4:7c:5c:67:aa:
09:83:16:33:19:a4:80:da:bc:fa:30:09:e5:37:59:65:91:6e:
99:be:8d:a7:8f:e2:5f:b9:11:57:79:9c:e0:b8:50:db:ca:d8:
aa:48:45:e1:cf:89:bd:ed:f5:a3:90:dc:f8:16:da:ee:71:de:
43:50:ab:46:a1:8e:06:8c:80:dd:12:be:cd:de:de:b7:4b:9b:
f4:34:2d:20:8c:a2:d5:43:d8:34:69:cb:5c:5d:4d:56:58:df:
1e:f5:54:44:0c:cd:8b:90:18:75:70:58:2f:8c:9f:25:02:a6:
2a:b8:2f:c5:f3:2f:d7:57:6b:92:68:67:5b:f9:a9:c1:36:6e:
11:c8:60:37:18:8b:f2:22:2f:57:ab:40:a0:de:03:29:54:ea:
11:cc:ca:dd:34:cc:20:7d:2d:36:a2:15:73:23:99:f3:f0:ab:
c4:41:d9:5d:c9:8b:af:a5:f2:71:78:b4:a6:c3:bc:c3:3d:99:
a7:ba:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:10:23 2026 by rpki-client