
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa
File: 28a61ba9-4981-330e-9187-5e16813a87a0.roa (raw, json)
Hash identifier: usTBGeXGSLSDwpW8AbkI835Snc777RLgHvKn3hvqR1Q=
Subject key identifier: 8E:BE:7E:BD:DE:CA:6A:A2:32:EA:B9:87:22:71:6E:69:71:7C:F4:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E61456E501CDDD2C3B517F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 397198
IP address blocks: 2001:500:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:45:6e:50:1c:dd:d2:c3:b5:17:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=674aa440-0c44-4a6a-9f56-67a53b6c6b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:ff:bd:c7:16:57:e5:a0:7d:cc:3d:99:66:
9a:69:7a:ba:af:50:90:88:ed:ce:71:1c:e3:6c:bd:
a4:f9:b2:dd:91:3c:b0:48:c5:61:4c:d9:4a:8c:55:
73:ff:08:a1:ab:2e:02:36:ac:77:42:b0:13:94:9c:
c7:14:f8:27:ea:e3:77:2d:b7:c2:cc:6a:d0:39:3d:
7a:1b:22:6f:5e:de:ad:ed:1c:bd:96:21:0e:c6:55:
0d:5d:5c:c0:c0:97:dc:ee:ed:08:b6:07:09:2a:13:
11:73:7a:61:83:a9:38:92:5a:c4:9b:d1:73:9c:5a:
14:8e:ec:0c:67:04:eb:76:28:02:2d:d2:19:d5:84:
4c:a7:38:54:c0:ae:e8:35:63:10:b5:7d:b9:3f:65:
42:62:0c:8c:f9:93:d5:be:8f:54:cb:2f:6c:ed:bb:
0b:0c:d2:a1:a6:f8:c1:bd:6e:b2:ba:83:19:2c:b3:
1c:75:25:a4:6c:81:22:ad:28:74:6d:ae:18:1b:a7:
a4:c1:14:f8:12:fa:db:84:5f:73:f2:4b:6a:7a:4b:
48:5d:48:6d:3d:a9:18:08:38:d9:d2:96:fd:d9:fd:
88:6b:7c:79:9e:e0:e3:0a:fa:a5:d9:06:3e:b4:9b:
e3:c6:8c:cd:c8:0c:43:dd:2b:6b:c8:73:c8:9e:a4:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:7E:BD:DE:CA:6A:A2:32:EA:B9:87:22:71:6E:69:71:7C:F4:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:94:2c:59:eb:1f:13:18:96:3f:db:4c:86:a4:d4:cb:e7:72:
90:49:8d:8c:8a:a3:a5:21:65:3f:da:29:84:b5:ac:12:72:a0:
40:e0:43:de:a6:31:37:14:54:95:44:f4:91:77:7b:70:17:56:
8d:a7:07:60:ea:db:60:1d:a9:1d:5b:3c:82:c1:28:5a:ed:7c:
4b:09:53:5e:10:a0:67:ef:00:bf:47:2e:1b:91:ef:fc:d4:20:
d7:3d:cb:e9:89:0e:4c:c5:6a:5c:97:4d:d9:7b:2e:6a:5c:59:
b5:1d:0a:3b:69:0b:b9:b1:db:34:5b:9f:45:1a:51:8b:62:45:
b9:ce:12:14:c7:9e:3a:af:ee:e4:e0:d0:a2:f0:c9:4c:45:fd:
8b:00:8f:0a:73:b6:55:34:5b:6c:e6:9d:76:73:60:b7:96:ce:
d2:16:14:ad:10:61:84:e0:5e:a5:74:96:be:41:49:63:ff:31:
28:d6:c9:fe:6d:83:e4:2e:73:8d:90:2f:b4:93:98:7b:0f:38:
61:56:cc:53:f4:d0:38:ac:56:ce:8c:e5:71:1e:1f:4f:82:7f:
c9:85:95:89:b4:30:d5:c2:75:2c:f6:b4:d6:84:e1:3a:75:54:
7a:86:b4:c9:28:0a:bd:db:92:e0:6d:3a:9c:e1:b4:0a:ba:96:
3c:fa:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:23 2026 by rpki-client