
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
File: dbad8993-698d-3d02-aaee-faa7494f65d2.roa (raw, json)
Hash identifier: v5+GJz/NbPJKHjaA7lVOtYrfpiWQm9crI/YeeCk76f4=
Subject key identifier: 2C:D4:87:C6:C5:B6:1D:95:21:43:0E:9E:79:09:62:FB:78:DC:78:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06727580F49F58289FDB4D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396552
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:75:80:f4:9f:58:28:9f:db:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=6294e8ca-3a6a-48a1-8d1e-45ed65cdddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:2a:9f:e7:d9:f4:1b:09:4e:45:b5:1d:98:
2a:e9:08:bf:ff:e1:ba:fe:65:87:e7:e4:5b:3b:90:
42:15:75:d0:43:0e:f8:ca:e9:c4:42:f7:ae:c3:00:
03:c1:bc:1d:30:d8:58:82:f0:57:e4:c7:87:9c:3b:
4f:63:cb:32:76:c0:9d:26:f7:72:76:da:46:ef:d1:
4d:87:2f:d2:51:91:d8:f8:42:45:78:af:60:7c:6f:
7f:b4:ec:a1:2f:2b:dd:36:6a:30:ea:6a:92:3f:37:
97:5e:0e:c5:e7:56:24:be:02:b3:b8:1e:6d:9d:6b:
65:1c:b8:bb:7e:b9:b7:cb:e1:a7:6b:36:63:22:04:
76:8b:4f:45:35:6a:a5:fb:aa:e2:cc:cf:5f:42:cd:
64:df:e1:c4:c0:7f:b1:27:4b:f5:c2:f6:9c:67:a9:
99:a5:f0:1f:8b:99:bf:b0:28:25:f8:f8:26:96:81:
4e:03:37:3f:d4:77:6b:db:82:9b:16:58:cc:cd:d9:
16:bb:88:14:fd:51:bb:23:41:ff:4b:65:d9:e0:42:
21:a8:00:9d:54:47:e5:bf:ff:54:cf:82:22:64:36:
2d:db:f7:b8:b0:66:24:fe:95:bf:6e:5c:03:54:7f:
da:9c:37:7b:c1:ce:16:c6:40:df:d4:35:5e:91:b2:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:87:C6:C5:B6:1D:95:21:43:0E:9E:79:09:62:FB:78:DC:78:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c6:0a:34:84:54:76:2e:fe:b3:13:94:11:5b:ad:ba:85:af:
a0:a6:d1:14:1e:b1:95:a0:f2:8b:42:62:a0:fa:7f:77:0b:37:
05:de:3d:00:bd:1e:bc:82:3d:5e:11:7e:5e:16:be:69:de:e3:
df:d2:ed:dd:8f:0a:a0:82:2e:ba:a4:44:a4:4e:ea:84:30:e1:
53:d8:5d:44:dc:7d:92:29:c6:b1:e3:99:98:dc:66:f9:26:85:
ab:61:8d:b9:3a:3e:d0:ab:82:92:0d:7f:5b:3c:dd:9d:5d:d7:
9d:7c:03:f4:0c:15:67:f9:b9:94:e1:d7:7f:ee:b5:ca:d3:c8:
bf:96:40:fc:aa:e1:18:c4:c4:09:77:3d:e4:a0:8c:93:dd:31:
0d:10:74:8f:88:96:e7:e4:36:b8:6e:cd:f9:20:e0:72:a4:7d:
8c:d3:fb:1e:f6:39:1d:6e:64:3f:21:0b:ca:b4:3e:4a:fc:a6:
b1:fd:7e:ee:15:77:fa:f1:85:1a:cf:5a:6b:3b:17:4f:8d:39:
5e:a6:d2:c3:79:cd:15:1d:4d:12:58:cf:18:ce:ea:82:22:eb:
3e:6b:7e:d7:94:9c:8b:69:ce:66:5c:4d:16:ed:73:e8:83:64:
8c:64:75:5a:6f:4a:5f:a2:0a:21:1c:ed:29:6c:aa:fd:81:d9:
aa:d0:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:06 2026 by rpki-client