
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
File: f25e9c1d-5728-31af-8972-a301f57f3e78.roa (raw, json)
Hash identifier: Z0L4q58h87Q6mpKeNOK5utOlbOOgWRpYc53Ra4No/FA=
Subject key identifier: AA:2A:A4:25:1D:81:B6:A6:E0:A9:C7:C9:3F:6B:32:EB:E7:56:0F:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49869B910019D70417857500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396586
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:9b:91:00:19:d7:04:17:85:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1f7ad9cf-f99c-4e0a-90f1-15d5c9a8016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:e5:3a:2c:b2:a0:de:a8:09:94:31:7d:4a:
5d:63:e0:96:35:09:b0:25:1e:4b:8f:88:c2:ec:a3:
fd:08:4d:eb:ed:f8:77:c2:f9:f2:42:b5:6a:88:d5:
3a:8e:98:71:5d:3a:ae:ab:9b:fa:36:42:77:fa:4b:
3d:00:dd:68:85:f9:42:d1:b1:75:1d:87:9d:03:0e:
0f:1a:b8:93:bd:07:7a:44:f5:8a:e4:34:41:eb:26:
f8:b9:0b:68:5e:27:48:6f:60:dd:aa:14:22:2b:01:
2c:d0:17:94:f6:1a:41:51:e7:cb:c1:08:f4:e8:ce:
39:ae:29:9a:b4:a5:66:94:de:cd:9c:c8:27:78:f3:
5e:53:58:d2:33:03:2b:b9:aa:23:0c:31:ef:6b:7e:
9a:a2:e0:4e:3c:26:1c:3e:a8:67:cc:8e:04:28:20:
63:3a:d1:58:f3:f8:04:0f:d9:c5:24:81:b9:6f:01:
ee:26:e3:70:fc:a1:17:2b:31:42:0b:f4:13:55:49:
6b:2a:be:ad:40:0b:17:76:d5:f7:35:1d:c2:c7:e7:
28:18:91:5f:b4:b3:72:5a:20:fc:75:93:f5:e5:80:
98:e3:44:c0:ae:67:59:8b:61:68:ce:d6:ee:17:73:
32:b3:ef:80:2e:b4:58:b1:c4:f1:64:a3:d0:f1:b9:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:A4:25:1D:81:B6:A6:E0:A9:C7:C9:3F:6B:32:EB:E7:56:0F:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:fe:20:26:71:8c:91:d4:6e:2e:9a:b3:e6:02:f9:3e:13:97:
e5:fa:1a:1d:b9:2d:9d:b7:3c:79:63:1c:8d:69:32:ef:bb:1f:
e4:81:29:6a:61:22:18:a9:dc:34:2c:4e:37:17:f4:7e:b2:b5:
30:4e:12:8b:a3:0d:70:02:b6:2d:6e:b8:30:a0:d5:87:d2:21:
42:90:1b:40:e6:65:ff:fd:29:5f:38:b5:0a:dd:e4:35:d8:80:
2c:da:cd:ba:5e:47:51:ae:ee:79:f2:57:2f:42:d9:d5:03:8d:
ed:c9:58:95:94:40:f2:25:a9:af:ca:66:fa:d9:3a:ca:43:db:
56:6c:d7:30:f9:c0:ac:c0:ba:3d:f6:fe:17:fc:1e:d4:c7:97:
30:68:01:ad:0c:34:71:c5:ca:cf:f6:66:48:39:4f:d0:98:67:
b9:10:bf:9a:e3:82:76:ae:f4:d6:c1:52:e0:4f:0c:8b:18:83:
40:1c:b4:ee:30:c8:07:61:a8:87:9c:2e:c5:62:66:99:d2:25:
b6:13:0b:bf:65:48:d1:7d:5e:13:af:8b:c1:9b:d6:55:06:cc:
3a:b7:5c:ca:91:1a:23:20:ae:e1:8e:c4:fd:c7:9f:7f:a6:92:
a7:5e:12:73:34:ee:a9:a6:9f:63:67:4c:c6:70:c1:a9:d4:f2:
a1:dd:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:49:18 2026 by rpki-client