
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f67757f-6273-36d1-87a6-caa9e92cc998.roa
File: 4f67757f-6273-36d1-87a6-caa9e92cc998.roa (raw, json)
Hash identifier: pJ8HbTyVsud1V3erupk36/iufuW7/pzWDMrGuBHKGVE=
Subject key identifier: DE:63:33:6F:6B:C5:A9:B2:59:83:3C:A5:C2:3F:05:33:75:A9:E1:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4972E7116DDD76EFA293F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f67757f-6273-36d1-87a6-caa9e92cc998.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20172
IP address blocks: 2001:500:30ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:e7:11:6d:dd:76:ef:a2:93:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2c2c2c7a-d8b3-46aa-9457-1a3dd0c0fc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:d0:f1:e5:a7:89:98:d4:a0:be:d4:18:06:
bf:db:28:b8:6b:a8:f8:8b:9d:84:84:5b:4e:ff:29:
d7:7e:22:1e:16:b5:1a:b3:d7:3f:da:60:84:d2:7a:
f9:bb:2b:58:53:68:ec:64:25:94:15:f3:68:42:f1:
e6:61:b8:4f:50:3e:11:98:bf:89:e0:4d:ee:f7:93:
b9:7b:55:e9:eb:18:60:65:b3:f1:2f:a1:a3:93:49:
df:fb:c6:02:43:03:a6:a2:f1:ef:37:c0:f5:51:78:
c5:22:d6:ca:cf:bf:c7:80:48:36:a4:a0:a1:b8:02:
b4:75:ef:36:2b:a5:15:92:70:ea:00:05:47:ec:8d:
85:53:f5:a6:76:c3:9f:74:9e:d6:4f:16:ca:c3:a0:
f2:b6:b1:d1:a3:d5:18:e3:de:07:83:9c:8a:8f:03:
67:c2:68:a4:76:c6:20:b2:55:b8:49:03:a7:9a:d3:
bc:ad:93:36:e0:b0:75:61:3b:b2:3d:a4:0f:f4:e9:
70:a2:71:be:4c:4e:bb:32:54:38:64:45:eb:fe:55:
c0:3f:49:61:04:aa:3b:21:23:be:64:e5:60:85:d5:
fb:63:73:1e:92:0d:f7:21:eb:9a:5c:bc:44:15:31:
28:ae:8f:7b:29:1c:61:93:ad:07:ec:74:cb:c4:ec:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:33:6F:6B:C5:A9:B2:59:83:3C:A5:C2:3F:05:33:75:A9:E1:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f67757f-6273-36d1-87a6-caa9e92cc998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:5b:33:e8:aa:97:0a:d6:5e:2f:05:34:56:fd:66:9e:ac:e7:
40:05:3a:e7:38:84:85:36:98:25:d4:d0:26:74:b9:0d:e6:83:
0d:76:1b:d7:8d:e2:7f:9f:f0:0f:a6:d2:82:c7:1c:16:9a:33:
8e:83:f9:9b:d2:51:63:1d:c4:23:f5:d7:7f:5a:b1:fb:ff:12:
71:ea:84:2c:60:7e:58:3b:c1:1f:f6:b1:d7:cf:56:38:a9:21:
39:9f:79:bf:dd:41:04:a3:ba:da:a6:84:c1:9d:e8:07:f7:c1:
e6:4d:42:99:71:fd:cc:77:f4:7a:5b:1e:2b:53:9b:cc:f7:e0:
b9:b2:4b:c4:98:c1:41:06:f2:60:61:4f:88:d4:50:c7:c4:73:
0a:61:16:f2:91:4b:c7:91:12:0a:02:3d:bd:ad:16:63:e3:28:
f2:9c:5f:54:c9:b5:ab:29:78:1f:1c:4e:aa:0d:82:0d:32:cd:
0a:67:d2:03:0c:23:71:8e:62:52:35:df:98:c6:5b:74:a9:b2:
6f:69:5e:ea:32:81:7a:dc:a7:28:66:aa:d0:d2:eb:cc:fa:8b:
50:e5:2a:03:e4:5d:38:1e:8c:21:7c:f1:53:33:80:48:95:ce:
ed:a4:80:44:9a:1e:3e:f7:9b:dc:8e:3a:42:e2:5b:b3:e3:02:
5b:48:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:51:18 2026 by rpki-client