
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa
File: 65c9a6be-ca81-3932-84aa-42446f37f433.roa (raw, json)
Hash identifier: IO/8Tkg3uj4fm+RJBt5P3VBQZ0++LMVhVNOhVb7wsms=
Subject key identifier: 8F:16:6D:42:E8:AD:10:1F:ED:5F:D9:02:84:21:F2:72:50:CA:EA:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497F7F7A157E2067E44BCE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40717
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:7f:7a:15:7e:20:67:e4:4b:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fb70eb54-632c-4bad-a148-d3a0469065e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:2d:3e:1e:8e:8e:18:d9:04:09:9b:97:df:
b7:04:2c:78:8c:43:50:54:0f:ce:a3:62:c1:35:32:
24:db:41:49:e3:da:8f:45:3a:5c:ef:9c:b7:f6:ec:
45:83:a5:fa:64:e4:c4:75:b8:3f:41:1c:f8:1c:6f:
5b:28:88:66:4f:58:5f:e3:d0:c3:80:74:0a:8a:ff:
d9:e2:fb:43:03:01:8c:41:b9:7c:a7:37:72:28:71:
97:9e:c4:a0:72:95:8e:b9:c9:6b:c0:ef:c1:27:36:
cb:f7:94:76:3c:dc:ba:d5:16:3b:4c:62:5f:06:be:
d1:7d:c2:c9:90:b2:88:25:63:fe:b3:ff:89:29:38:
9c:8c:b3:bf:7e:ad:5b:95:53:ff:64:aa:43:b0:c3:
79:2d:2c:30:0d:81:4b:51:96:b7:3c:71:c1:bc:53:
d6:a4:17:36:cb:9d:51:f3:3b:7e:92:a3:a9:18:08:
70:e8:f4:56:60:1f:d5:16:ab:2d:15:94:9d:3a:9c:
1f:d1:30:93:1a:2a:12:fb:b7:3c:91:56:55:52:05:
fe:6f:e3:cc:be:cc:e4:9a:02:32:a7:5b:97:a2:7b:
d5:35:96:8d:7e:2c:e1:f7:da:9d:1c:83:c4:c9:d3:
61:b4:a8:8d:22:61:c4:d0:f5:68:b2:88:45:5c:b1:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:6D:42:E8:AD:10:1F:ED:5F:D9:02:84:21:F2:72:50:CA:EA:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:45:95:f2:40:57:4d:9a:c8:9e:d3:6e:b4:c0:8a:84:79:26:
3c:d3:04:23:02:25:32:31:af:30:fd:ba:e6:7b:c0:2c:a7:dc:
c0:05:83:35:4b:f1:fe:f0:b9:db:20:9b:c8:70:e3:57:95:51:
9b:23:ac:c6:87:f8:18:67:02:cd:28:92:1c:71:ba:a8:f4:96:
6b:92:e0:e2:84:6c:92:d0:91:5d:9a:5d:64:0d:85:c9:72:f1:
04:40:27:c9:5d:b6:74:3e:a3:b1:dc:82:5c:ce:e3:7b:3b:fa:
5e:65:07:48:b5:f8:de:e2:ed:19:e6:ce:e7:70:ea:9a:52:4b:
6b:61:e9:24:a3:8f:55:12:34:b4:35:a4:50:8b:d1:46:ff:ba:
2d:f1:4b:c7:95:ef:cc:26:39:c8:43:7b:0a:bc:ac:ea:0c:a9:
b2:0a:1c:36:6f:b7:06:cc:6e:a6:ec:8e:18:7f:45:9a:d2:1a:
50:d8:c2:fe:c2:dc:30:f7:d6:89:f5:99:7d:ad:8c:43:9e:9a:
3c:8b:79:8b:81:4a:75:1a:77:3b:54:7a:c2:28:a0:ff:a8:a3:
10:5d:99:fa:98:f6:57:87:7c:d1:44:a7:99:97:a9:db:fa:8c:
08:a4:56:bc:e4:a6:ee:ff:0a:08:5a:3d:c1:de:54:1c:13:fc:
52:28:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:24 2026 by rpki-client