
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d534d4-72c0-3eb0-ab4a-0bc06bd71071.roa
File: 25d534d4-72c0-3eb0-ab4a-0bc06bd71071.roa (raw, json)
Hash identifier: tsKDXrP2UBEROyDEbI2oph8P0Mr7ePQ0Sn6mgo2ou/8=
Subject key identifier: 2D:2E:91:5E:56:E2:61:99:50:C3:9C:B7:71:B4:4E:E1:FF:01:1F:C4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498ADCEB29AD575BCE426F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d534d4-72c0-3eb0-ab4a-0bc06bd71071.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 32651
IP address blocks: 2001:503:83eb::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:dc:eb:29:ad:57:5b:ce:42:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bae4295e-f5eb-4af0-b44f-c4d209e02375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:2c:ed:e6:61:fb:48:2b:6a:80:d0:96:a6:
ab:41:3c:60:88:5a:94:98:c7:01:81:61:4e:04:83:
c0:64:44:47:61:14:7f:14:67:25:a8:07:d8:6a:52:
5b:b4:45:f4:d0:69:dd:e5:9e:cd:95:4b:62:17:52:
12:5c:fc:e6:86:0c:bf:1f:b7:8e:6c:b1:6d:bb:75:
07:be:68:f8:dd:59:9e:7c:19:23:e2:80:a1:0d:fb:
c1:ca:05:ea:e7:7d:6a:c6:83:e1:64:fa:94:15:0d:
7d:11:14:9e:ab:c4:5d:fd:9b:bb:e8:35:92:8b:1c:
99:f4:64:79:7b:ad:19:1f:e9:d0:3b:77:85:54:be:
4b:08:f8:37:88:d4:06:61:4a:d8:f9:0f:d9:0f:a2:
9d:17:27:0f:2c:fd:93:1e:a8:e8:97:4b:61:f4:3c:
e8:cb:7d:b4:15:e5:e1:54:40:9a:25:89:b7:a9:1f:
2c:6c:51:9b:cc:24:f8:bd:52:76:d1:85:a3:02:3c:
ea:2a:af:c7:66:74:22:5b:a5:fb:b6:c4:fd:16:4c:
55:4e:3f:66:bc:eb:ae:82:11:1b:1e:4c:ae:fa:57:
2d:0e:aa:46:9e:5e:c5:78:69:da:0a:5d:db:26:f8:
0c:ca:a0:1f:03:68:47:d5:8c:92:51:8d:61:ca:0d:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:91:5E:56:E2:61:99:50:C3:9C:B7:71:B4:4E:E1:FF:01:1F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25d534d4-72c0-3eb0-ab4a-0bc06bd71071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:83eb:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:44:73:9d:3b:1d:c9:47:5d:58:b7:92:ae:2e:50:2a:95:40:
44:0f:b9:2c:45:c2:53:3c:3b:af:ed:8e:77:27:3e:2c:bf:05:
d1:4a:41:c0:02:8d:a0:10:b9:ac:65:11:15:93:2b:87:4f:a4:
fe:b8:75:34:8b:00:35:00:e2:56:f2:09:a7:88:cb:d7:cf:07:
48:5a:ca:f9:f9:8a:57:34:35:75:ec:f5:13:78:8c:90:11:4a:
19:38:74:af:d3:a7:42:14:6c:68:62:35:db:7d:8d:75:01:85:
b7:ee:03:5f:71:60:d2:06:86:4f:44:69:a5:80:64:21:c1:a6:
e2:65:4f:01:9a:e1:6b:39:35:61:32:1f:7a:40:5b:8a:9e:84:
37:9f:1f:c2:fb:34:bf:17:ea:cc:2f:c2:70:29:b7:db:33:1c:
b5:02:0e:9a:0a:b8:85:63:44:15:71:41:ac:bc:07:c6:14:78:
98:56:f9:11:88:c6:47:d5:f3:18:a8:97:fb:5c:db:f8:12:8b:
82:cd:fb:26:b7:82:0c:96:df:9b:ef:00:f9:2c:e2:97:7a:d4:
f4:98:51:1a:7f:27:56:71:a0:65:61:2f:5d:96:49:eb:12:b0:
7d:77:3b:d1:50:26:5d:e0:1f:dc:90:ad:dc:8a:86:b7:71:1c:
d1:ce:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:12:44 2026 by rpki-client