
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa
File: dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa (raw, json)
Hash identifier: ZnIpGfEemDlkbGnqpvRI6xZMXVuhmO25FvLCGsVd5dE=
Subject key identifier: 7F:C8:61:1B:FE:EE:2B:EB:7A:A0:01:B5:22:28:9B:EC:9A:D4:EF:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B20B21D67661C7C2C2F2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 396566
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:0b:21:d6:76:61:c7:c2:c2:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=bf5f8906-dbf3-4a23-8fc8-bffd8fec2d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:e7:3d:a6:1f:0f:2c:ef:9f:38:d7:9a:76:
4c:1f:4e:6c:e2:02:78:ba:2e:3c:b7:88:db:d8:8a:
f3:62:88:56:7a:d4:81:d1:5d:ba:f8:b0:de:e8:9c:
45:dc:64:b0:bd:32:2d:53:f8:5b:93:6e:c1:52:04:
f1:8a:62:c1:d6:f8:37:04:3a:79:f5:ac:dd:3f:71:
07:7a:91:aa:67:f9:bd:b0:b6:cb:ef:95:57:ee:53:
d9:a5:be:ff:2d:06:2e:79:c2:b1:ce:01:75:cb:d1:
07:ac:df:f7:7a:78:e8:bc:14:62:13:b6:88:22:45:
96:47:88:ac:13:f6:a7:9e:5e:2a:af:00:73:21:1c:
63:0f:95:27:bd:60:57:67:e3:66:7f:05:1b:ab:6b:
20:b0:03:81:2c:8e:a7:41:9b:55:8f:6e:28:6d:76:
11:6a:87:a9:70:63:0e:cd:e4:e2:d6:36:91:3b:ca:
26:63:b6:8c:74:b3:f9:52:f5:23:a5:50:b7:ea:ab:
12:80:3b:b4:d8:87:e0:f2:04:b4:40:39:4a:77:81:
4a:d8:da:29:eb:e2:32:8e:46:99:1a:f2:f3:c4:7c:
10:e1:52:b6:b1:06:f9:ae:f6:79:d1:bd:ba:f6:f6:
ea:e1:3d:26:77:20:16:25:38:89:b6:83:0b:96:2e:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:61:1B:FE:EE:2B:EB:7A:A0:01:B5:22:28:9B:EC:9A:D4:EF:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:cf:99:ca:1b:eb:0a:83:de:1e:76:25:15:50:a9:90:21:8a:
a9:19:74:7f:e2:dd:76:26:e3:99:47:e0:3e:d9:38:53:6e:95:
a1:24:92:ab:36:ff:2f:72:8b:3a:61:20:86:03:3d:77:8e:ac:
ff:bc:4a:ab:44:48:6f:93:8a:4c:3f:5c:0b:c2:0e:cb:b5:24:
33:2e:9e:76:56:3d:8e:76:fd:5a:98:cd:9a:88:ff:c2:7c:dc:
d6:ba:39:0f:0d:bd:23:be:74:80:ae:81:24:1f:a9:2a:80:31:
23:42:0c:31:f9:60:5b:16:8a:e6:2a:a2:a1:70:96:7f:2f:ce:
11:3a:5e:10:c5:59:f2:c1:c6:73:7e:ce:c6:66:3b:4f:96:c9:
37:49:32:dc:70:35:13:c1:bb:68:03:8d:a2:2d:f6:a4:2e:ca:
bd:7b:f8:b7:14:85:90:9c:a7:c0:00:10:59:34:01:26:83:58:
4a:c3:f6:a3:49:33:3e:54:f7:60:10:a8:17:c2:7b:98:33:44:
f8:b8:fc:74:6e:cc:5c:d4:b8:df:7f:f6:9d:65:26:99:7c:e7:
8f:da:2f:71:df:ca:8b:19:64:0e:9c:48:87:33:9a:1b:e2:3b:
a0:e2:04:0c:33:03:2e:1d:c4:e8:b2:3b:d6:c8:69:e7:57:53:
67:3e:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:41 2026 by rpki-client