
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deaf44d3-48f4-3bbc-8424-483b37588c72.roa
File: deaf44d3-48f4-3bbc-8424-483b37588c72.roa (raw, json)
Hash identifier: snHpfk4jKPZY4WOB0DfX1tOP6dkPM/kbnJZIi7oAof0=
Subject key identifier: 89:D1:85:43:3E:A6:9B:2B:E6:C0:F1:A4:79:B4:E6:A2:1D:DB:F9:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC794D9A8534ADCD113B180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deaf44d3-48f4-3bbc-8424-483b37588c72.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 396592
IP address blocks: 2001:503:a83e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:94:d9:a8:53:4a:dc:d1:13:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=7975ef32-f15d-4d2f-bb81-b31bde4770d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:5b:65:3e:f7:cd:69:d9:5b:7e:a8:e8:8a:
96:6b:42:ff:45:4a:12:bb:4b:14:08:ac:c5:a1:c9:
be:e6:e3:f1:67:4f:f1:34:0a:cf:ba:dd:5d:80:fb:
2e:45:7a:f9:cc:26:89:87:09:f9:cc:fe:b1:c6:6f:
6c:a5:fc:06:a3:01:f6:4e:fa:de:c9:ec:a7:e2:b5:
d8:d3:e7:0b:8d:dd:ba:25:e3:69:f0:47:ad:a4:6c:
7d:c8:00:ac:42:c4:a2:26:30:f1:20:29:9c:52:cc:
e1:d9:bf:64:cc:81:65:ec:b8:a4:8b:29:ad:3d:5f:
29:51:bb:59:9a:7a:c1:1f:93:c6:c8:e2:c9:69:a5:
08:2f:23:0e:13:4b:82:c2:47:2b:e4:9a:90:7d:a0:
37:7f:9e:95:54:ca:e3:58:34:cb:e1:27:fe:6d:5a:
2c:84:4e:02:35:6c:be:eb:c0:06:60:7a:03:7c:eb:
8b:44:3c:32:90:84:e6:ff:da:25:32:6a:1e:f0:3e:
00:50:bf:91:f4:66:92:c9:94:28:8c:95:2b:e9:32:
ee:48:43:df:b4:67:89:b8:1e:5f:21:6d:34:af:99:
a0:94:97:e0:45:53:dc:a5:00:9c:dc:7c:b3:5d:25:
8a:33:62:2c:15:5c:d0:e2:e8:af:25:f6:61:2d:70:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:85:43:3E:A6:9B:2B:E6:C0:F1:A4:79:B4:E6:A2:1D:DB:F9:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deaf44d3-48f4-3bbc-8424-483b37588c72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:a83e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e5:47:98:a5:b8:a0:c5:10:12:df:32:55:af:43:f4:86:ee:
43:35:c8:d3:0a:fb:1b:eb:c7:f2:08:b2:43:0e:93:3c:cf:8c:
f4:1d:24:cd:6c:f9:68:c9:8e:41:f7:c0:1b:42:11:b2:37:e4:
2d:2e:9d:54:3f:41:e1:49:ad:c2:fd:16:63:23:ad:6c:b3:d3:
64:18:d8:94:ab:52:21:7d:58:56:96:d6:d6:ca:56:e9:f6:9d:
11:af:ae:4e:d9:30:99:98:40:a1:d7:be:a4:56:4f:9c:72:21:
5d:ba:e5:31:6f:31:2b:25:88:c8:e8:41:c5:6a:0f:90:c4:84:
5a:2d:1e:a2:75:09:a8:44:2d:2b:9a:80:1a:d4:21:9e:19:4d:
6b:cf:0b:45:3d:93:8c:28:7f:7c:78:6d:fb:1f:5e:c5:6b:4f:
3c:e1:0e:0b:57:fe:9d:63:ec:35:fb:38:85:38:3e:cd:5a:d4:
61:4f:44:c6:8e:57:19:3d:cf:40:6e:b1:77:09:94:e9:94:8f:
65:0b:00:3f:3d:7c:68:61:ce:71:21:39:77:32:4b:90:e3:99:
f0:3b:17:bb:1a:05:69:2e:ba:dd:a6:1c:44:a9:6e:8f:77:44:
d2:d7:89:ea:bb:65:3b:e7:df:4e:92:bd:b8:d5:4f:ae:43:dc:
ba:d6:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:51:52 2026 by rpki-client