
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa
File: 749be1da-cab9-316d-8b21-96a2a6ab5d33.roa (raw, json)
Hash identifier: KqehYd63RHCqKJ6NG38PPMsygKSN4JeOeRPf4J+EZYY=
Subject key identifier: 19:FE:87:B8:90:B4:15:0F:F2:3D:55:11:7D:F5:FB:B2:05:D6:C6:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497385DD06CCADDBA024E540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20172
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:85:dd:06:cc:ad:db:a0:24:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d6511e90-aef0-4759-9440-c45298d329c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:59:fb:d7:d9:24:9c:25:34:70:18:db:3e:
82:52:10:8f:40:87:3d:6b:1b:ba:ca:ad:39:ed:93:
6f:ef:64:5c:58:9d:c7:fc:f1:7d:b0:c0:d7:4a:58:
02:60:c0:49:d7:c5:fb:c6:01:a0:61:0d:ab:38:b3:
5e:d9:0a:87:bc:55:06:b5:98:b7:09:1e:22:71:26:
53:fc:6c:d2:09:a2:26:1b:75:c4:20:30:bd:7a:b8:
b3:0c:4c:a5:0f:65:07:37:dd:3e:29:a7:4b:59:c8:
5e:e0:c4:d3:48:c7:08:cb:05:47:b6:04:8e:54:cb:
a7:c8:da:46:bd:7b:d5:d7:2c:51:92:92:b4:93:3a:
ae:d0:65:50:c1:55:14:ce:a5:72:9d:d8:26:1e:15:
56:99:20:74:65:af:c7:6f:c4:90:bd:57:91:cf:98:
7a:5f:03:38:8c:39:98:4a:94:85:e1:f1:24:da:12:
dc:fb:df:40:6a:da:19:ae:7b:98:f1:80:4f:b0:65:
c4:9a:ff:8a:19:28:3b:e2:66:f1:38:cc:ef:5d:ed:
de:81:d6:ae:3f:04:63:29:a8:dc:66:dc:3b:67:4c:
8e:68:22:67:b5:98:1f:a0:8d:bd:5c:b6:9f:74:ca:
68:4b:bd:8b:d5:a9:2a:5c:fc:a0:0b:0e:7b:a3:25:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:87:B8:90:B4:15:0F:F2:3D:55:11:7D:F5:FB:B2:05:D6:C6:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:11:a5:02:7d:cd:64:f3:fd:14:df:6a:f6:5e:61:b9:ab:f2:
d8:b4:5d:a2:36:64:08:97:92:f9:84:b5:ed:7e:c3:b5:90:0e:
20:da:ca:ca:e4:12:d1:4d:95:af:27:71:43:79:41:c7:aa:7c:
74:a7:1b:77:94:d0:eb:6b:a2:cd:98:1a:5a:91:31:c2:af:fe:
c5:a0:b7:94:75:54:30:e7:cf:ab:5c:6b:c9:d8:3e:17:72:4f:
ed:b6:74:60:5d:b1:4a:8a:f9:c5:c5:be:73:4f:38:c0:62:60:
9b:5d:d8:6b:87:90:3d:8a:d2:34:dd:04:56:00:ec:ed:cf:0e:
be:53:dd:9e:03:50:6d:af:a2:c1:64:02:11:ec:cb:bd:0d:91:
5e:b0:e0:15:31:92:97:71:81:e3:e1:26:3c:04:a6:46:32:35:
27:5f:19:07:82:fc:0a:4b:ed:be:93:7d:fa:ec:6c:be:c1:a2:
50:f8:11:9b:4e:5c:87:30:90:6f:7d:6f:63:dd:b6:d2:5c:cf:
ef:2b:f9:ad:86:c1:b1:99:c6:fb:60:85:ca:13:1f:46:aa:f6:
d5:11:5a:db:3c:16:b6:0e:eb:ce:ee:85:28:43:8f:2b:bb:76:
f2:db:47:0d:9f:f7:87:f3:d4:23:e7:92:80:25:c2:63:c6:b8:
72:9c:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:15:23 2026 by rpki-client