
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dcf358f-e421-39d0-b76e-0df46dea76c6.roa
File: 2dcf358f-e421-39d0-b76e-0df46dea76c6.roa (raw, json)
Hash identifier: XyrpiLm5CBob4+M6it2leOHTGkrfdxfvA+AG5arOxjM=
Subject key identifier: 62:83:00:8C:90:7A:61:13:97:C6:47:4D:97:2E:34:B3:65:DD:D7:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E5A4A19FA5BCC6A7AEE91C0A8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dcf358f-e421-39d0-b76e-0df46dea76c6.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 36623
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:19:fa:5b:cc:6a:7a:ee:91:c0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=4745de83-4780-451a-a871-2b7e84a95050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:76:b3:3c:26:8c:1c:30:4c:12:11:17:41:
c8:57:72:3f:ea:e9:f3:0b:83:5b:fb:0d:30:7e:48:
90:70:d4:89:5f:7d:01:ff:da:a6:af:92:89:e0:d6:
4f:26:23:81:b3:a7:18:86:f2:9d:4b:51:a1:f7:82:
b1:01:31:db:af:07:00:01:da:7f:4e:0c:16:f9:6d:
71:fe:ae:94:33:4c:5d:81:b5:e4:17:34:ef:25:fa:
08:9f:12:85:d8:78:ca:e2:2d:04:f3:27:09:db:f9:
ed:b9:51:9f:e9:93:e9:a3:1f:73:3e:7a:57:fb:87:
a8:bb:fe:fb:e9:82:56:ae:b7:da:f7:19:2f:60:69:
b6:f6:ae:7f:0e:4f:4e:39:6b:47:43:cc:3d:ef:52:
64:ff:d2:88:77:44:70:cf:10:60:da:7b:38:90:15:
a4:3f:46:60:14:26:f0:86:95:e7:03:7b:ac:6e:95:
a6:c3:92:6b:3a:a3:13:cd:a6:b9:ea:7a:a6:12:c7:
e2:4a:30:e2:f8:99:ec:3e:5c:d8:d5:7c:02:99:dd:
1b:89:2d:98:2d:91:f2:a3:8b:16:65:c7:ba:52:16:
e2:63:75:7b:98:8e:d0:ef:aa:b8:65:ab:48:0d:47:
b3:65:95:06:d8:83:ab:85:f4:a4:f4:26:6a:b3:98:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:83:00:8C:90:7A:61:13:97:C6:47:4D:97:2E:34:B3:65:DD:D7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dcf358f-e421-39d0-b76e-0df46dea76c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:bf:33:c5:4b:8d:05:ad:85:76:51:ab:8a:a4:b1:20:c2:00:
37:36:73:78:c1:e9:8f:62:26:f5:3a:46:b8:d4:51:d2:7b:98:
26:9d:fe:3b:b0:b3:24:91:a5:23:50:7d:b2:d0:d1:f1:d6:b2:
2f:b4:e3:92:28:a0:16:a9:af:28:63:03:b4:49:a9:34:f6:57:
1b:79:be:ec:8f:c8:15:ec:c8:58:e8:c8:91:43:e1:be:fe:27:
2c:cf:96:58:fa:43:ff:99:12:dd:f5:b5:e9:e8:af:7e:4d:80:
3e:67:df:87:ec:37:b9:b5:65:23:89:97:e3:3b:ea:fe:6f:7f:
ca:31:bc:c8:d6:db:b7:cb:2e:9d:f0:f4:02:ec:a5:4b:51:87:
1d:54:16:b2:a9:b3:04:11:c4:d3:15:d4:73:bb:c7:b3:13:77:
5f:90:8a:56:7a:29:7b:a3:24:52:f3:1e:93:af:6c:b0:4d:20:
52:a6:ab:57:6e:bf:62:f1:45:62:9f:47:0b:9b:79:13:d9:6e:
96:cf:60:57:93:ca:47:70:05:8c:d8:cf:7f:07:16:03:c7:54:
b3:99:42:09:e5:f2:6c:21:d5:23:2a:76:9f:e0:84:6f:f4:8b:
7b:87:70:ab:57:62:a8:8d:11:2f:e0:42:77:b0:6d:b8:9e:ef:
bf:c1:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:18 2026 by rpki-client