
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa
File: 408a472a-dd08-3193-bcce-560538aea5f1.roa (raw, json)
Hash identifier: HOdnd8M5LTWzS/S3Jn+2zT4ylW3L6RfMF0PRYhLeQ6w=
Subject key identifier: 5C:E0:C7:F3:86:79:67:F7:8F:1E:D0:61:CD:46:40:41:DE:45:EF:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2ABD2F7B518C29214F66E600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 20172
IP address blocks: 2001:503:eea3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:2f:7b:51:8c:29:21:4f:66:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=892c1179-ac9c-413e-ad9f-1b97e7d0b37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:a3:02:56:d3:e2:bd:e5:5d:ca:ec:63:db:
54:71:c2:db:64:9e:a0:75:97:70:bf:74:00:a3:08:
4e:42:88:aa:6f:07:e9:b0:97:b7:eb:e8:fc:42:7e:
cf:35:8f:be:38:d3:d0:de:eb:d9:a2:e2:10:12:d3:
05:03:8c:af:c7:12:32:4f:28:7b:b2:79:ae:12:b5:
d9:d4:68:9f:dc:9f:cb:8f:ad:c6:1d:5b:91:3d:3a:
45:fe:f6:cd:3c:f9:eb:8b:27:a6:d3:de:15:cb:57:
38:4e:0c:c3:06:82:3c:f0:95:c8:32:62:6b:6e:d4:
71:90:05:78:35:02:a4:b8:bb:a5:87:d4:db:ee:6f:
21:5d:a1:fb:85:b1:37:8a:a3:c7:02:a6:14:5a:ec:
b0:f8:51:03:e7:03:d2:6b:d9:68:4d:34:6b:81:e1:
c6:51:45:9b:af:a4:09:ae:e4:de:2b:7d:b6:10:a1:
d9:3c:d5:fc:41:f2:f7:cb:14:ab:1c:36:55:39:f3:
17:ff:e4:78:7d:23:ab:2f:4c:95:c9:47:9f:d8:b3:
2b:9b:d1:23:57:92:db:66:63:2b:85:a7:c0:52:e0:
ed:0d:66:cd:60:2a:81:97:80:18:bb:41:98:e5:1e:
9c:41:90:a4:28:4e:7a:30:5a:15:6e:5a:f9:74:31:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:C7:F3:86:79:67:F7:8F:1E:D0:61:CD:46:40:41:DE:45:EF:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:eea3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:5f:fd:2a:5e:2b:8d:76:4e:e6:8f:c7:03:55:b2:37:55:d1:
64:0c:18:cd:99:4c:1f:9d:cf:92:9d:88:03:a3:09:d3:fa:67:
67:72:9b:fc:d8:f8:d1:b3:0e:f1:18:6b:28:dd:c3:6c:b4:ae:
4e:71:43:8b:77:6d:3b:66:e5:3b:c6:53:4a:f2:61:a0:10:cc:
ba:4d:4b:96:f4:0c:93:d0:b8:4d:3d:ad:54:d9:aa:c4:da:84:
02:45:a4:3c:4b:f9:16:c7:19:1a:54:44:a4:20:55:9e:44:ea:
65:87:bb:2b:16:36:97:1b:1d:58:9b:97:f4:47:b4:1c:0f:ec:
13:80:fd:7a:02:8d:13:15:77:f9:36:08:dd:16:6c:6e:2f:de:
cd:36:b9:72:98:07:2a:c7:db:86:aa:cb:a7:85:a7:b3:9e:55:
f6:1f:4c:90:ba:7d:95:7d:51:8c:00:ec:38:0f:ee:0f:29:64:
50:a1:3d:8c:bc:cc:51:d0:14:44:8f:f4:a6:44:4e:97:6e:1c:
1b:16:03:69:9c:3c:45:1f:6e:ae:9f:f4:a4:84:45:df:48:89:
c0:6c:f2:ac:ba:e7:32:30:5a:de:48:30:88:35:d9:db:b0:b1:
bc:91:c6:89:b6:03:7c:eb:c8:1b:1a:0e:40:a8:b9:15:19:22:
2c:2d:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:45:59 2026 by rpki-client