
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa165712-b346-343f-afd6-ad68b0b5184f.roa
File: aa165712-b346-343f-afd6-ad68b0b5184f.roa (raw, json)
Hash identifier: SHbaORBGDsrnpiG1/lh2+J6mwqB25v/Pcj2HN3HbReE=
Subject key identifier: 89:C9:08:18:33:44:E6:E9:EF:17:17:13:5F:6A:95:F5:49:DE:D7:81
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0ED23A6340650770F4A698F2
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa165712-b346-343f-afd6-ad68b0b5184f.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 396576
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:3a:63:40:65:07:70:f4:a6:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=71df7393-d2dd-4684-a650-717a2288e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:0e:2c:5f:28:0f:cd:e5:e4:68:9c:17:ac:
ef:1c:2a:23:5a:e5:00:db:1c:49:ba:5d:7f:42:08:
0a:8e:fa:0e:b4:e2:4e:27:b3:3b:c5:5e:b4:5a:45:
ce:b6:6d:fd:87:91:33:13:2e:78:01:dc:52:22:de:
23:dc:dc:aa:14:b3:6c:ae:79:f2:4c:4a:47:b5:13:
43:bc:bb:ec:98:52:2e:c4:ef:61:89:63:49:99:37:
be:8e:a6:eb:d7:5f:59:cb:c6:80:90:ac:11:80:f6:
a0:4c:2d:13:1c:60:84:6a:11:74:fb:93:ba:2f:cc:
d4:4f:29:07:13:41:36:f9:42:37:ce:ec:55:0d:b5:
7b:bd:e6:1a:75:f9:b4:1d:0c:1f:0a:f3:a8:86:88:
3b:32:89:80:a7:02:79:8d:2f:b4:dd:4d:2b:8c:32:
81:ce:57:a9:ac:26:be:de:41:34:98:19:be:eb:21:
08:bb:bf:f4:57:ec:c9:e0:4a:18:e1:d5:eb:8a:5e:
b1:03:1a:f1:24:d2:57:8f:a2:3a:02:c5:ad:bb:1b:
e1:de:a7:84:3b:5d:ba:3b:a6:cd:d4:63:07:fc:ba:
b6:4e:da:1e:8e:71:53:63:13:df:63:38:63:5a:40:
d0:c0:52:a2:8b:dc:33:96:00:17:02:ed:87:1c:c2:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:08:18:33:44:E6:E9:EF:17:17:13:5F:6A:95:F5:49:DE:D7:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa165712-b346-343f-afd6-ad68b0b5184f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9d:46:b4:40:1b:7b:0e:71:64:ba:35:e8:d1:e7:61:51:77:
16:2d:55:ce:07:7f:57:19:58:a0:f2:e5:b2:a3:df:be:e2:f2:
a0:01:7a:3b:64:2d:e2:11:c3:79:41:ce:07:63:1e:31:fa:3b:
1c:94:be:98:93:53:9c:a7:29:27:88:2a:35:b2:03:7a:8d:c7:
78:d8:d0:bf:47:8b:bb:6a:d2:11:94:75:6f:cb:85:f9:85:9b:
2d:c5:9b:2c:16:a1:1f:9d:07:68:79:bf:c4:58:ef:4e:be:8a:
77:8a:6e:a9:0a:82:4b:5c:70:58:c6:d9:d0:02:30:2e:46:a6:
74:44:20:13:36:00:b7:ef:15:81:72:9f:bb:10:38:0d:67:51:
9d:a6:fc:05:6b:a6:b3:6e:d9:6a:cc:53:14:d0:e2:42:50:5b:
49:2f:a3:fd:0b:e6:96:58:56:d8:54:20:47:12:0c:50:ef:04:
c6:fa:2c:4a:11:2d:47:83:21:d8:af:48:8b:4c:37:6d:d0:b7:
eb:6e:4a:cb:d5:39:50:13:3c:28:ba:19:c7:a8:c2:7f:0b:66:
e8:ec:e5:2d:03:f1:71:01:3d:33:0d:27:62:b3:b2:b1:16:df:
c4:31:4e:db:74:da:6a:65:b4:13:8e:b5:35:6f:f0:9a:9c:b7:
46:49:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:59:49 2026 by rpki-client