
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b722504f-0235-3ba9-b3d7-b5f9e8ceb357.roa
File: b722504f-0235-3ba9-b3d7-b5f9e8ceb357.roa (raw, json)
Hash identifier: f00NzVgDv0ta3+jX2DkdiU8amPQ8HnRzXzPr7r/gmjg=
Subject key identifier: A6:81:8C:C2:36:9D:70:1A:97:43:87:31:95:9E:97:0E:4E:AE:9A:08
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497365CBFA3C364562C40A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b722504f-0235-3ba9-b3d7-b5f9e8ceb357.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396571
IP address blocks: 2001:503:d414::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:65:cb:fa:3c:36:45:62:c4:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=36d5d920-88ad-4638-9bad-e5d6fe35847d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:9e:83:78:66:cf:38:d0:8e:74:b5:6e:66:
4a:fc:56:6d:d7:30:fa:f5:c8:21:60:da:7e:e1:d2:
aa:30:fa:d9:79:91:2a:94:25:32:e8:59:4e:12:bf:
6a:5c:18:5e:83:97:31:74:b8:14:ea:f7:1c:e0:3c:
78:75:77:0a:52:00:16:ec:4b:60:45:39:b1:84:cb:
fb:75:db:82:3e:e7:06:b6:3d:56:57:3a:4a:df:71:
ed:e5:8d:c2:94:6d:6a:61:9b:0e:00:61:4a:3a:52:
5e:ff:d6:26:1e:fc:36:92:c3:af:a2:a4:de:08:fd:
56:8f:04:71:c9:81:61:f0:71:ef:dc:bb:01:8c:63:
f1:99:b1:3f:15:d6:8f:5a:08:4d:5b:c7:ab:cb:bc:
ee:f1:eb:0a:0e:63:c0:3d:22:84:df:d2:b5:80:03:
a0:06:50:8a:7a:52:7e:35:f1:45:8c:77:c2:4b:19:
d2:83:eb:b1:74:6f:1e:b7:ac:33:bc:95:f9:bc:03:
75:ae:fc:a3:99:50:e1:0c:db:1b:c4:21:25:b4:ea:
36:72:f1:8e:80:57:64:8f:81:8d:bd:1f:97:ad:b4:
8c:9c:6d:15:7d:c6:fd:7e:39:9d:64:19:26:55:b1:
27:62:ac:80:8c:ed:a8:4c:f1:5a:db:8b:95:f7:32:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:8C:C2:36:9D:70:1A:97:43:87:31:95:9E:97:0E:4E:AE:9A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b722504f-0235-3ba9-b3d7-b5f9e8ceb357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d414::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:63:fb:99:cc:0f:de:cc:d0:0d:aa:3a:39:4c:9f:a2:f2:cb:
7c:d4:2e:64:e4:8a:c1:89:55:7a:d0:1b:39:10:b8:af:5f:1f:
2a:ef:29:04:e0:f5:07:1d:b8:96:de:40:6c:33:0e:ef:79:7b:
c7:fc:3a:65:24:de:5f:e8:89:ee:cf:ba:21:09:92:7d:9f:70:
9a:a8:68:19:db:66:c6:78:ca:bd:35:9d:82:6d:4a:b6:2c:e8:
17:6d:fd:99:24:e9:59:a0:0a:22:1d:3c:d0:12:bc:08:5b:61:
e5:54:f0:f2:42:34:8e:b9:d2:60:51:37:1c:42:62:4b:32:fb:
07:04:67:26:ae:c8:2f:35:0d:e5:fd:2e:4a:6b:b0:14:9e:b5:
68:d5:26:93:d0:06:29:2e:2e:81:ff:4b:d4:bf:e1:27:8e:1e:
88:8d:88:e4:a7:96:58:cc:a6:e8:07:11:cb:88:64:c2:f2:0c:
9b:17:73:d8:a6:50:27:70:30:a6:be:13:81:c1:d1:fe:25:c8:
36:c4:13:9b:e1:0d:e2:35:1f:fd:68:88:3f:bf:00:4b:2d:5e:
7b:8d:ee:25:03:bb:f6:06:cc:46:87:d6:b1:4f:7b:f3:03:03:
28:81:1b:d7:3c:04:94:25:a3:a8:a1:63:5a:0c:3f:75:47:41:
82:73:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:55:50 2026 by rpki-client