
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab260a53-ed39-3c9d-bfc7-d70550d66746.roa
File: ab260a53-ed39-3c9d-bfc7-d70550d66746.roa (raw, json)
Hash identifier: +cFhqsfUwJ9wpg/qd1OJCaOmRVkHFKMcr003hUSTHe0=
Subject key identifier: 79:F9:0D:22:85:68:9A:D8:1C:19:44:55:D4:FD:8E:99:19:6B:C3:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B207A2D3AE9853BE64B480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab260a53-ed39-3c9d-bfc7-d70550d66746.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 396560
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:07:a2:d3:ae:98:53:be:64:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=ca133996-9877-4924-9254-89b17347cbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:2c:4f:73:62:ea:49:c2:69:1d:e2:3e:8f:
51:06:6c:ea:29:22:f3:fe:a1:b4:f7:3f:b0:16:34:
74:bf:48:dd:94:4d:f2:15:4e:a0:bd:54:8a:46:76:
05:ff:ff:14:40:3a:ec:2c:c1:55:3f:b6:ac:e2:ae:
7a:c0:51:60:24:f6:a4:37:e3:74:e0:7a:f8:14:96:
0b:8a:39:71:d6:97:5e:55:cc:a6:77:34:4b:2f:49:
f7:b8:3e:78:e2:11:5c:72:5b:53:87:d3:55:4d:5b:
2e:7b:4b:80:f0:72:e7:71:fb:ab:64:ac:59:21:65:
84:e5:31:59:3d:0a:35:05:e8:0e:ae:da:5b:7f:04:
71:9a:a6:18:46:54:3c:9f:7c:04:3e:fa:c0:27:31:
97:2c:6b:33:09:4b:0d:d9:4d:73:2d:3e:25:bd:1a:
f4:dd:d2:57:4e:f8:b3:3e:8d:c2:53:f4:5c:5f:dc:
46:6f:28:4b:12:80:fa:29:ef:04:f1:7f:cf:f7:ba:
e6:d4:06:e7:83:fe:de:e2:dd:11:e2:4b:03:30:fe:
d7:84:dc:2e:0d:2a:80:91:af:f3:42:4e:c2:5d:73:
7f:3a:1a:3c:ec:c9:1b:56:b3:51:0c:41:fe:52:00:
5f:80:fc:65:c5:86:ee:a3:95:ed:48:c1:cd:09:35:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:0D:22:85:68:9A:D8:1C:19:44:55:D4:FD:8E:99:19:6B:C3:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab260a53-ed39-3c9d-bfc7-d70550d66746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:d4:62:ee:05:fd:69:ed:14:42:a5:b3:f0:38:c7:a3:2b:05:
26:66:70:b6:18:49:38:76:1c:ac:d9:0a:77:e5:01:34:1c:b2:
9b:f3:e2:ea:06:15:29:02:cb:73:43:83:a2:70:22:36:d0:6f:
ff:50:99:41:74:44:8e:dc:0b:8a:cf:b1:1f:7e:a6:99:ce:b9:
91:01:85:c3:94:ed:4f:66:e2:7d:a6:16:31:05:27:d3:1e:d5:
72:37:e9:84:0b:39:da:ea:2a:68:59:32:fe:c2:af:a8:2a:84:
40:ad:cb:bb:99:4b:65:46:c0:80:da:e4:95:47:93:f9:c6:b1:
9f:49:14:e5:af:1c:63:11:6f:5e:c6:90:4b:e9:f7:c4:ae:c8:
b2:cc:b2:68:ba:fb:ed:ab:ce:c5:89:8f:e5:98:f9:dc:0f:ad:
c5:1b:75:a7:e0:2b:12:3d:3e:62:07:d5:4f:1e:4d:d4:76:25:
51:e4:af:09:57:ce:cd:f2:74:3d:ca:4d:c8:71:8a:68:15:08:
eb:b1:f3:2c:37:70:4b:bd:54:a9:55:a9:97:df:92:aa:ed:00:
d8:d0:47:0a:69:1c:61:4b:b3:bd:08:d2:ff:6f:18:d1:27:71:
09:e7:58:98:0f:cb:75:85:f1:12:03:19:ca:d7:6d:b9:f9:34:
6c:41:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:41 2026 by rpki-client