
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa
File: 428457c7-ce61-3c36-8bbe-586d416386c9.roa (raw, json)
Hash identifier: Y6tXqdYduzxV6mkdnEEo2kQby8NxuzthiHzNmwUQoto=
Subject key identifier: C4:DA:0A:24:7A:D2:D2:60:C0:5E:53:C3:2E:22:20:4E:A4:7B:94:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0ED23C98B0A1D0119B888D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 27544
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:3c:98:b0:a1:d0:11:9b:88:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=7313fc35-f1fe-4002-a37f-4a32f1a163e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:b6:22:3e:5e:32:03:ba:3b:b1:d2:a2:2a:
b1:0d:bb:d6:62:12:4d:48:cf:8b:5b:ac:68:b4:f4:
71:28:04:35:92:b5:cb:eb:c6:96:cc:a1:ec:8b:c0:
3d:b8:21:33:3c:e2:d3:48:01:6d:e8:ff:df:ea:aa:
6b:83:e6:3f:aa:67:02:10:b4:58:26:ac:28:aa:77:
cf:b4:c8:b0:eb:3c:bd:1f:af:13:a4:a4:7a:b2:84:
d9:a3:a1:a4:25:53:02:aa:4e:75:a7:01:ea:d9:fe:
e6:92:d2:1c:38:88:27:60:fc:c6:a8:6c:d6:49:1c:
68:92:81:52:a2:d7:d2:48:d9:f2:ee:64:96:e6:56:
af:72:7d:81:5c:06:74:00:78:61:93:fe:2b:31:c9:
30:40:08:52:81:3b:11:41:00:50:fc:67:0a:07:38:
4a:36:5b:71:d3:e1:43:3d:45:a5:b4:63:dc:b7:bf:
7b:ef:0c:d4:42:21:91:e7:2d:53:7e:bd:c0:ef:0d:
b1:c5:16:18:22:af:4c:91:53:23:73:d2:f2:07:26:
1f:1e:7f:76:ee:f2:25:a1:76:6c:51:62:bf:0e:19:
d9:6b:3f:ed:87:ff:3e:42:e4:25:5c:0d:f2:de:5c:
59:dd:57:58:2a:29:18:6c:b5:51:e3:28:07:68:62:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:0A:24:7A:D2:D2:60:C0:5E:53:C3:2E:22:20:4E:A4:7B:94:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:12:48:e2:ff:db:30:d6:37:29:ce:2b:ff:e9:95:47:8a:0c:
e4:7e:35:28:3b:4b:37:69:6d:b3:ea:13:e5:58:be:91:d7:40:
6a:02:dd:bd:f4:49:c1:3b:f7:5f:9e:17:8c:fa:2b:7b:a5:6f:
5c:87:48:ff:72:59:04:7e:a6:ff:45:bb:c8:48:8c:a0:24:4a:
f4:e0:49:6a:42:1d:51:8d:c4:f7:eb:b7:21:9a:53:49:49:ab:
51:80:f0:97:15:ef:49:2f:63:ad:19:78:e2:ac:94:f7:e8:fc:
f9:0d:f3:71:1a:9c:21:c2:46:17:c4:f3:9f:0a:d4:66:cc:e3:
4b:3f:0b:5e:e3:0c:f6:b4:c7:f5:fb:1e:88:10:4a:bf:78:e0:
17:50:94:6b:7c:41:70:a4:8b:7d:d3:eb:11:a5:de:ad:6f:89:
99:95:bb:ba:71:21:51:8e:bb:07:d8:43:9d:74:7f:14:14:5f:
3a:8a:03:cf:61:a5:53:70:23:56:d8:85:b6:f0:40:3b:c2:63:
d6:0a:1a:27:62:22:43:cb:04:92:ff:03:89:f9:bf:04:53:0e:
6c:8f:40:c2:56:18:5f:1d:49:68:19:c8:a9:73:38:45:97:80:
ae:64:5c:79:3c:91:f1:96:d6:5c:2f:4c:1c:e5:30:fe:00:3c:
87:52:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:28:49 2026 by rpki-client