
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa
File: 3652cfae-6deb-384b-bb73-ba6dd3b47705.roa (raw, json)
Hash identifier: 2TN7P4GWwNgEreTQdbeQ/X0pThKYtZ3Oq5plxGFWrH4=
Subject key identifier: E1:91:DC:60:49:6F:0E:81:0A:68:FB:72:05:88:7A:FE:EE:AA:F1:CD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49869ADD07A7EC77BEC22780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396578
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:9a:dd:07:a7:ec:77:be:c2:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=112341ba-371a-4f77-9e3b-67d083575c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:31:cb:07:23:ab:5a:5d:d4:7d:bb:c2:e2:
b4:77:47:c5:b1:00:48:c0:9e:b2:54:cc:9a:ca:50:
f8:85:e5:b9:08:0e:b4:82:9a:6d:8d:22:19:65:0e:
82:dc:a0:27:cb:12:e5:e8:53:a0:4c:75:62:a1:9f:
39:1a:53:41:13:d4:e8:9f:d1:94:66:9c:bf:b0:cc:
01:9c:cb:5d:dd:1d:ec:2e:ec:d4:93:c0:13:49:de:
90:31:a2:bb:60:82:92:1e:82:b7:17:e8:96:cf:05:
dc:5c:1e:64:8f:49:e1:4c:68:10:bb:cc:b3:69:0d:
83:1f:89:ac:a4:7b:5b:ca:0d:22:44:17:12:a6:3a:
06:06:05:19:de:34:14:12:12:11:ff:3d:81:11:37:
be:3c:db:da:fe:b8:4d:40:db:8f:b7:57:09:d4:ba:
54:cd:4f:a9:db:15:b9:c3:18:ef:e0:1b:03:ab:19:
6f:85:c4:f0:e8:77:19:47:ea:4e:0e:ae:4b:a2:40:
e8:76:6c:54:0a:7c:52:8f:2f:b2:ac:85:40:3c:8c:
1e:29:9f:f6:e9:aa:fe:67:25:9e:19:2c:df:67:15:
a8:6f:d7:13:c3:92:e4:3b:da:03:4a:eb:77:f2:2e:
97:81:f3:a3:83:12:c0:18:98:32:69:d2:8e:ab:27:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:DC:60:49:6F:0E:81:0A:68:FB:72:05:88:7A:FE:EE:AA:F1:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:99:1d:fc:41:9f:10:62:33:66:9c:54:41:5d:f3:a3:9f:ac:
19:cd:d1:f7:42:e1:9a:96:00:0c:df:f1:5e:b3:6c:1d:4b:51:
0a:71:34:b5:9d:55:70:22:54:6d:61:f1:88:89:6d:0e:2e:95:
d7:a5:35:04:a4:8a:46:87:40:3f:10:fd:7d:aa:bd:20:c9:1a:
f4:31:04:74:1a:44:bd:b5:9a:0c:43:1f:03:ae:83:d5:59:ab:
b1:14:04:16:06:ae:64:b8:1d:8a:e7:d9:43:40:a3:63:7a:cc:
05:e8:a1:ac:c3:38:71:a3:13:ac:52:cf:80:5b:e3:d4:65:7d:
e4:68:ce:ad:f9:8f:46:63:71:c0:cb:8a:31:e0:c2:85:29:f4:
74:68:87:a7:e5:80:50:7a:a5:52:70:df:dd:cd:29:c6:61:5d:
51:e3:c8:89:42:b4:ae:9a:7d:86:43:79:27:b0:97:a7:7d:fd:
88:d0:38:27:ae:c1:cc:dd:a1:83:6c:c2:14:93:d4:06:88:a7:
7d:d9:7a:c0:56:96:31:02:7e:2f:28:5f:fe:5b:85:de:a3:7e:
66:9d:9a:7b:8c:81:b6:40:70:cb:92:91:c9:47:96:40:6a:d3:
a7:3a:77:c0:64:31:3d:07:f2:d8:2b:64:1a:35:3c:ec:69:05:
67:ce:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:28 2026 by rpki-client