
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa
File: 24f7a023-e5ce-3d27-8805-9c2b663cf394.roa (raw, json)
Hash identifier: /FUpn0a69lfTyyXd1QvY7C5sP7LxwjZhcK/dKSRvfqE=
Subject key identifier: B7:28:73:C3:7E:4F:0C:F0:2A:97:92:E5:97:42:EC:DB:12:27:D3:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F23C28176BB9209E410693000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 396591
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:81:76:bb:92:09:e4:10:69:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=1d521970-6c6a-4fa9-8943-04a6bdd2266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:56:23:be:e8:c9:68:04:c7:e3:d0:61:1d:c3:
54:11:2b:b7:50:2e:82:1b:ea:5f:27:a3:95:5b:fd:
e1:0f:d5:06:33:d3:83:5d:ef:dc:3d:7c:e7:d8:4a:
fa:22:ca:e3:87:3c:6e:cf:bc:ae:da:dc:6b:78:8e:
88:26:d8:b7:2d:e8:4d:26:1a:29:92:bf:b3:98:da:
3a:07:62:cc:98:91:34:88:9c:e2:e2:42:79:89:13:
a9:1f:36:46:0d:84:56:b5:e8:29:ff:0c:7d:c4:8c:
ce:1a:df:1f:91:2c:fe:db:b5:b3:7f:bc:f6:7f:af:
58:d4:73:32:13:2b:c6:81:e0:06:57:0e:f4:95:33:
3c:4a:0f:41:f0:27:84:42:02:57:e4:6a:c6:46:f2:
ea:c8:52:7b:ff:52:f3:71:db:48:9a:56:96:e4:ec:
d2:af:ef:bb:79:0e:83:c4:78:a6:69:69:1e:7f:21:
00:10:3a:48:0f:1e:9b:61:3f:99:ec:ab:90:d5:a7:
17:ce:13:d5:07:6f:cd:eb:79:f3:5b:04:33:a1:12:
fe:bc:18:6d:7e:77:6c:df:c1:d4:22:4c:33:ca:42:
94:f6:e5:ed:0c:eb:2d:c2:93:ac:ee:19:f2:72:49:
4b:7c:88:fb:73:50:9e:ea:3d:96:3b:0f:e7:4f:5c:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:73:C3:7E:4F:0C:F0:2A:97:92:E5:97:42:EC:DB:12:27:D3:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24f7a023-e5ce-3d27-8805-9c2b663cf394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:84:c4:bb:76:78:ba:6b:5f:f3:81:3c:33:30:1d:4c:d6:9b:
48:26:c0:80:eb:57:d5:f9:23:26:94:ca:cf:c7:99:2a:49:8f:
5c:3e:30:d9:70:28:27:2d:bb:7d:ce:41:32:f2:59:fa:44:f9:
4b:38:f1:74:0c:55:17:93:b7:c1:f6:07:3e:6c:e9:c9:c3:05:
a3:74:f1:f6:2d:9c:d1:ef:9c:d3:76:9e:48:7e:aa:68:e8:dc:
09:f0:8e:8a:d2:38:52:4a:19:fa:0d:39:df:ba:08:50:0d:f8:
ab:c5:fe:40:7e:62:29:ac:61:13:47:cf:e4:bb:be:5a:3d:61:
4c:35:e5:97:c1:c1:23:08:97:7e:18:a9:f7:f9:f2:70:5c:fc:
4f:fe:d2:3e:a8:4c:a7:1f:ab:f6:f0:3f:b7:aa:7e:0a:15:6e:
6f:1c:85:99:fe:17:c5:ea:82:37:4c:8e:4e:df:3f:7c:b5:61:
46:87:8c:4a:26:01:78:bc:65:09:88:0a:d1:83:05:12:9d:0a:
cc:45:fd:36:1a:2e:fb:23:36:38:64:09:90:48:81:6d:36:78:
22:59:70:a3:00:c6:9a:e2:7b:66:2d:f1:62:0c:55:ac:68:08:
cb:4a:7c:b8:d6:f2:d0:4a:53:4f:05:c7:91:65:1c:24:56:f1:
ad:d7:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:19:31 2026 by rpki-client