
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
File: a542d1af-2531-3290-ba71-eda11a3f1e71.roa (raw, json)
Hash identifier: vKLUmhbxgbS/wWksXMCzY1DiCmRKStbi1psjZ8NOSm8=
Subject key identifier: B4:30:F5:A7:65:30:4C:07:47:F3:47:FD:89:5B:DF:06:7D:C7:CC:5A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F11A156D4079B512535D7A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 396605
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:56:d4:07:9b:51:25:35:d7:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=db372d32-9e1d-4d07-90ab-fc0569bbc191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:1a:17:88:08:0d:7e:a6:8d:65:7b:53:b5:
3f:f2:f6:20:bc:63:0a:0a:ab:d9:c6:c4:51:bf:04:
c1:ff:fd:c8:46:a4:fa:a0:60:e3:b1:ee:d1:a5:09:
bb:9a:fe:c9:a1:9d:7d:30:d0:86:de:97:b9:8a:55:
09:91:d6:79:bd:c5:c6:f1:7f:57:6c:e5:a5:10:b5:
74:36:db:c4:ec:4d:1c:fd:2c:43:12:fc:e4:1b:79:
41:95:f2:74:9d:ef:3b:55:5e:20:22:5b:f1:5b:84:
2a:7f:63:d8:ff:d5:82:47:f0:6a:95:a3:55:21:a8:
e3:c2:bf:b9:0c:ce:93:56:c2:17:71:ba:71:b7:ae:
30:3a:1c:4b:1e:ca:ea:ea:14:49:df:70:c4:0f:dc:
3b:fa:01:4e:76:30:7a:ec:c0:ac:6d:e2:ec:f7:b2:
17:8c:d7:1e:af:39:29:91:12:52:f1:4a:4c:6e:cd:
29:1b:7e:11:50:ce:57:97:b3:74:72:b7:00:40:72:
b4:02:76:40:ed:0c:1d:b9:6b:3a:75:9e:33:08:f7:
2a:5b:31:e0:54:8b:a0:28:23:bc:b2:36:a1:13:1d:
d5:45:0d:30:6b:38:41:ff:2c:e1:b9:73:09:43:d7:
cd:cd:cf:69:d0:35:71:b3:b8:9d:d2:1d:53:7f:9f:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:F5:A7:65:30:4C:07:47:F3:47:FD:89:5B:DF:06:7D:C7:CC:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a542d1af-2531-3290-ba71-eda11a3f1e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0f:d6:ed:16:78:af:db:5f:1e:b1:8f:da:f6:ba:b9:c6:96:
c0:94:d3:97:3c:14:5e:de:d8:d2:45:e2:67:96:77:ec:ab:14:
7b:c8:c0:8c:81:81:a0:3c:53:e4:9a:68:2d:77:b3:a5:70:c1:
7f:76:18:81:82:d2:6b:59:e6:6a:d5:a7:4f:1c:2f:ef:b8:a7:
1c:95:72:11:79:b5:36:7f:58:91:66:18:ba:78:af:17:c1:c4:
aa:32:ef:70:c8:bd:12:cf:66:2c:71:1a:57:f5:99:3a:c3:39:
14:6d:ad:7b:b7:e9:65:ef:af:95:de:d7:f8:54:38:12:bd:98:
a3:5c:59:db:96:f5:a9:77:3f:d0:82:25:c3:90:3c:26:61:e1:
69:7c:78:be:86:c2:96:62:93:e4:96:ec:76:8e:fc:1c:70:b7:
2e:71:e8:22:9f:cc:9c:77:85:11:96:bb:b4:51:cf:f9:e5:b9:
81:37:e6:4c:f3:d2:1c:d3:b8:8c:66:a7:43:97:92:75:fb:cd:
5f:50:32:34:e6:9b:eb:5d:20:5b:4d:3c:21:e9:b9:7f:01:43:
77:24:5e:e2:4d:cd:49:06:8b:b9:2d:2b:7f:ad:36:23:c1:b9:
9d:7b:65:cd:e8:24:f9:b6:aa:31:fc:91:aa:ad:c5:fc:08:80:
b1:3e:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:43:28 2026 by rpki-client