
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa
File: f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa (raw, json)
Hash identifier: RP3wwJIuER9N321pvY6ElNX5rCrIlAu6LPjmhbgHK2k=
Subject key identifier: 5E:F1:31:99:CB:DF:74:63:B6:83:9C:E3:B0:8E:88:AE:F5:85:83:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF01CE049DB723DCE73962980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 32651
IP address blocks: 2001:500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:e0:49:db:72:3d:ce:73:96:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=8fc21b18-76cf-480f-9eda-eb05b3001d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:5a:1a:6f:a1:a6:cd:62:e3:ed:dd:aa:2f:
0d:02:8c:cc:07:3f:ee:14:e7:fb:a8:ea:d6:78:88:
6e:67:f1:fe:57:19:a3:3e:4f:45:dc:ca:f1:52:30:
b3:a2:3c:2f:9c:3d:0e:d4:75:67:03:89:4a:af:c5:
b1:b5:f0:38:f2:31:c7:5e:d5:c6:71:d9:63:56:ba:
cf:7a:c6:d8:11:2a:f9:df:2a:a0:f3:7e:f7:95:80:
44:d8:c6:53:36:29:75:d3:48:f0:61:18:89:6d:99:
bc:3f:5a:3f:36:0e:14:19:4b:d1:2f:e9:08:11:fb:
9c:80:c5:04:29:c2:66:89:25:6c:14:59:0f:fd:e8:
f2:8e:74:8c:33:92:15:51:23:dd:4b:1d:2a:8c:82:
52:b1:07:ff:c1:97:6e:cd:04:56:8e:0d:b0:22:1d:
83:fe:b2:fc:8b:92:6e:86:a1:57:23:fc:dc:50:7b:
29:fe:f0:bb:d6:38:83:c3:83:bd:3a:ce:8e:1b:fa:
06:ea:c4:1b:26:64:ac:79:db:84:ee:0e:c1:1d:6c:
a4:f9:0c:15:af:c2:b2:5e:31:6a:e0:cd:7b:44:c0:
16:22:6c:03:d5:a6:a9:56:48:e1:3e:60:62:06:aa:
3a:31:55:76:59:0e:94:17:c9:35:60:f2:bc:9c:90:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:31:99:CB:DF:74:63:B6:83:9C:E3:B0:8E:88:AE:F5:85:83:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:5a:30:25:ec:24:f1:d9:f7:20:7c:1b:f0:b0:c5:9d:ff:43:
4b:a6:21:29:ca:2f:e1:fb:e5:cc:10:87:f2:dd:32:af:1b:d9:
49:19:5d:27:d3:94:f1:b2:3f:65:aa:95:09:38:04:10:ee:94:
f7:a6:e1:32:47:18:74:af:53:42:73:d0:7b:d0:b8:37:8a:d8:
cc:ae:3d:cb:05:31:f1:b4:35:b0:9c:84:ff:0a:a2:b1:a4:d0:
e6:86:9c:43:dc:e9:c0:41:40:f9:7e:51:bc:61:27:67:a2:0c:
8e:79:f0:bf:ca:15:f2:df:44:c8:d2:ef:81:60:9c:6a:a4:26:
4a:de:05:d0:f7:1e:c2:48:37:9a:d7:a9:7f:18:75:a4:c2:e2:
86:cc:75:7c:0d:d7:96:df:8f:5e:53:b8:d7:77:29:0d:b4:6b:
b7:ad:e3:58:79:98:60:17:7e:fb:18:7f:a8:85:fc:e9:5a:1d:
6e:96:6e:85:4a:61:d8:ca:e4:cb:21:0f:3b:36:70:d1:d4:7f:
60:44:42:52:45:93:10:da:6d:6a:ae:61:15:8b:09:e9:74:f5:
bb:f8:8c:3a:5b:8f:5a:cd:80:dd:11:c5:03:70:b4:0f:b2:b9:
e0:b1:90:68:50:94:96:68:5c:26:dd:a2:d5:92:f7:15:cc:f8:
66:e9:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:28:29 2026 by rpki-client