
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa
File: a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa (raw, json)
Hash identifier: lFTREbp72Dpa8+A21GfMo0CH6S6rqnS2yETopqOwQeA=
Subject key identifier: 43:A7:FC:F9:DB:26:5E:8C:37:16:E6:45:4E:F1:98:59:10:10:98:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF01CAD2E3ED824C677833DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 396613
IP address blocks: 2001:500:13f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:ad:2e:3e:d8:24:c6:77:83:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=7b90c7d9-de91-42b2-b56f-05430f7c4de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:7c:86:56:e9:3f:ce:84:3c:98:4a:fe:c6:
a1:2e:29:57:81:c4:72:20:9f:e4:00:4e:93:77:26:
57:99:22:fe:de:7b:26:36:ff:dd:54:b2:8d:d7:95:
7e:63:fc:a1:93:83:37:40:3c:e3:9b:91:4f:fd:8d:
28:40:98:a5:c5:07:23:f3:ff:f5:f2:0e:31:76:b2:
11:94:8c:4d:cf:72:99:e6:50:a9:9f:0e:35:71:36:
39:36:c7:bd:4a:78:56:7a:f6:51:60:58:36:bb:17:
b3:af:c4:b2:46:8a:7b:fa:02:84:92:23:eb:6b:1c:
af:aa:83:38:8a:c5:81:27:05:b4:e7:dd:17:80:ea:
7b:ed:3f:1e:b6:d7:88:ad:20:2d:ff:7b:4d:33:63:
e6:91:e8:69:61:cc:38:fb:33:ce:bc:56:4e:e6:4a:
89:d7:9a:f7:cb:4b:d6:8d:7b:e2:f5:26:3c:36:64:
39:b6:98:92:e0:f1:00:09:df:27:7f:0f:b7:9b:6c:
dd:27:0f:8e:c4:c3:5e:9f:b9:c9:e7:8f:46:a7:8a:
3a:c2:0d:5e:69:25:7c:28:86:36:6b:98:a6:20:b5:
37:91:51:f2:f9:b5:1f:6c:2c:d8:a9:c6:d0:6e:9e:
ac:35:94:4c:ec:0f:4e:f8:8a:d1:0e:2f:4f:ab:9a:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:FC:F9:DB:26:5E:8C:37:16:E6:45:4E:F1:98:59:10:10:98:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:13f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:5a:c5:28:f0:bd:7f:bb:03:ba:c8:e1:72:48:7a:67:f0:f6:
6b:2c:ad:8f:46:be:c0:24:86:aa:49:f1:46:a3:fb:53:b5:21:
64:d0:ab:3b:9a:5e:2e:c9:b5:e2:4d:52:90:7f:8a:90:95:f3:
5c:ba:80:6c:4e:bf:3f:8b:93:bf:06:74:14:e8:65:4e:86:a3:
1b:a0:3c:e9:f8:5b:56:1a:8d:a7:8a:79:d3:c1:cf:c9:2b:4b:
6f:c2:cf:0d:33:06:95:f8:7d:c8:f2:7a:da:55:89:0a:9e:11:
7e:b3:02:0f:22:9f:58:6d:9e:8c:18:aa:4a:e7:08:04:00:2f:
d6:36:2c:8f:59:f9:24:28:5c:68:4b:5b:5d:0b:5e:41:4e:12:
ab:ee:d2:1e:09:a0:87:0b:b5:bb:37:2e:28:49:44:33:06:8f:
40:c0:27:44:4e:a3:d1:d5:e4:d1:03:88:6d:07:47:0f:3d:3f:
e4:ee:97:a0:23:3e:30:ff:b3:90:9b:9b:8b:2e:ab:37:f1:0b:
bc:58:af:3c:99:fa:3b:fb:78:13:c8:05:36:1e:50:90:4e:c3:
9b:80:4b:41:a7:9d:ab:c2:2f:e6:77:11:58:e0:7a:0d:a1:79:
87:b2:ff:eb:0a:7a:6d:57:f2:c3:e4:63:8d:9a:fe:f5:67:3c:
0f:ca:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:26 2026 by rpki-client