
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/317d437b-0804-3f02-aaee-505473bd796a.roa
File: 317d437b-0804-3f02-aaee-505473bd796a.roa (raw, json)
Hash identifier: SOG8ucQzdYPPJn6XLlJNpmuTFeBi+rSHCnzyez66OWg=
Subject key identifier: 3C:8D:9A:9D:3E:62:42:D1:CC:80:AA:ED:60:E3:55:48:24:A5:2D:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F11A13E909E70C4F2B5313D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/317d437b-0804-3f02-aaee-505473bd796a.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 396564
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:3e:90:9e:70:c4:f2:b5:31:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=df14bbe8-5f72-4da4-992a-8472aa0c2a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:4a:41:79:a3:b9:0c:7a:ca:19:23:18:82:
85:34:b2:4c:c0:92:da:b6:c5:5f:06:2a:6f:d9:dc:
ed:c4:90:75:17:15:0d:64:7d:df:3c:cd:35:bf:79:
27:d0:11:5e:67:ea:fe:da:d8:62:16:b8:dc:49:84:
50:30:4b:93:a4:25:05:d8:1a:35:3c:80:d9:32:ae:
75:60:19:cf:92:6d:3e:7b:32:60:c7:bc:53:d7:85:
a9:22:6b:c5:b6:82:28:ac:f5:c4:62:16:c8:8c:04:
bc:f2:c4:a7:b8:c0:30:38:a5:4e:7e:d9:c1:f4:59:
f2:56:f4:fd:c6:33:bb:6a:40:d0:19:73:ea:37:65:
e3:90:ad:30:bb:f6:9f:bd:1e:da:35:e6:05:7d:5a:
13:e1:df:82:90:90:4c:08:4c:6a:58:aa:5e:54:58:
e5:1d:66:f8:f3:04:6c:61:94:dc:17:09:b9:dd:f4:
cb:5f:0c:5c:9b:e5:c8:82:4f:10:d5:a8:81:48:08:
c2:6d:65:cb:a5:8a:32:12:d0:47:d6:95:61:46:d8:
51:38:8c:fd:5d:75:6d:b4:ea:6e:12:99:43:00:fc:
30:85:8e:6c:ec:fa:fd:bd:b5:dc:1a:14:8a:70:b3:
c7:2e:2b:c1:29:a3:03:4d:26:5d:f8:a7:af:df:b4:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:9A:9D:3E:62:42:D1:CC:80:AA:ED:60:E3:55:48:24:A5:2D:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/317d437b-0804-3f02-aaee-505473bd796a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:c8:bb:86:27:30:d5:ea:54:71:16:96:0d:19:98:19:73:d7:
f8:dd:34:8b:56:65:85:71:47:2b:c8:34:ee:46:55:26:fc:5d:
f4:5e:54:0e:b6:57:09:48:d6:bf:43:6c:95:96:30:46:a0:e8:
c5:93:44:5c:79:0d:0e:06:81:5d:4e:34:c2:86:61:c4:f3:4d:
2c:c6:62:01:da:2b:f4:54:2d:c0:20:cf:39:ac:5f:9b:cd:ef:
65:09:c3:b4:ff:25:94:ab:5d:7a:d2:4b:a2:58:e5:b5:a5:71:
97:2b:0f:4a:03:14:06:a8:03:8e:57:af:05:bd:f8:84:db:66:
fa:49:cd:ba:6a:9d:ab:c8:53:ac:99:71:8a:70:2c:0e:b1:1c:
1a:61:cb:19:fa:61:e6:a4:ba:ce:58:70:67:51:28:31:53:69:
fd:6b:06:69:5b:9b:76:f2:66:5f:4b:a6:fb:c5:d9:72:cf:98:
82:b5:bb:09:c5:ad:c9:0a:9b:5e:3d:97:2c:74:ad:45:75:9c:
a4:e0:e0:5d:fa:64:b3:6c:44:e3:34:9a:52:d3:30:57:fd:82:
b9:cb:ba:29:6b:64:83:c6:4f:ec:57:5e:09:c6:12:3d:84:34:
40:e4:fd:9f:44:d3:62:61:7e:48:e7:9a:fb:4c:60:20:a5:44:
6e:fb:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:15:08 2026 by rpki-client