
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffb2cb7-c6cc-3041-9a9a-20cac05addff.roa
File: bffb2cb7-c6cc-3041-9a9a-20cac05addff.roa (raw, json)
Hash identifier: +uU2kJyDK+/vqrUP59Fj7rvsAmUgzhIvppcl3USqBvg=
Subject key identifier: E3:D4:AD:F3:49:26:C0:E3:6A:E0:D9:21:A7:8E:5D:67:9D:F1:D3:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2ABD3121A073229B43215680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffb2cb7-c6cc-3041-9a9a-20cac05addff.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 396581
IP address blocks: 2001:503:eea3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:31:21:a0:73:22:9b:43:21:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=fca22a02-321b-4a42-ad9b-a525a4e5cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:5d:d9:e6:ea:21:43:b4:fb:aa:a9:c0:dc:
e2:33:6e:f9:82:09:95:1e:c8:63:7c:6c:ca:2b:2e:
ec:ce:c0:af:49:e9:54:33:82:a2:27:1b:05:4f:5b:
17:0b:40:6e:65:11:17:c0:13:cb:d0:49:d9:f6:43:
92:07:3d:b0:ac:b4:32:9c:e3:90:44:25:16:b1:c9:
e6:b8:e3:f5:73:ac:11:0e:54:0a:b6:46:74:56:81:
49:51:65:a2:16:cb:00:6e:80:3d:14:ec:61:09:4f:
ed:78:43:84:cf:de:a8:87:95:e5:b6:a0:0f:21:90:
3e:59:cb:b0:e8:b3:7c:10:9a:64:a9:c9:19:79:6e:
5f:20:9c:92:1b:ee:59:53:07:76:f7:85:ef:cc:33:
fc:6a:00:5d:5c:06:f5:d0:6c:6c:8d:1f:a8:c1:1e:
92:7b:20:11:79:3b:55:a6:f1:84:96:3c:54:83:26:
75:95:09:09:36:68:f1:78:9c:ec:78:2d:6c:d3:66:
2e:57:e3:00:30:93:a4:13:cd:10:5a:95:7a:99:4f:
1a:aa:0c:59:91:f0:ba:45:4b:31:c7:44:68:9b:95:
28:bb:50:5f:a5:d7:bd:7c:53:ec:af:3c:18:3c:8b:
52:9d:3e:d1:d2:01:cf:9d:bf:20:b7:27:4f:6d:eb:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:AD:F3:49:26:C0:E3:6A:E0:D9:21:A7:8E:5D:67:9D:F1:D3:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bffb2cb7-c6cc-3041-9a9a-20cac05addff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:eea3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:57:85:77:3b:93:45:ed:a1:61:d4:05:70:e4:a4:8f:1c:10:
49:2a:53:0d:a0:85:85:8e:30:fb:df:c6:f9:b3:bc:bb:ef:6f:
45:e6:51:90:53:b1:d9:f8:6b:9a:50:26:7a:3d:c8:8c:47:7a:
3c:64:aa:d1:2a:61:91:10:8f:2b:8c:c3:3d:62:a8:16:fc:3b:
87:14:e0:62:e6:62:7c:fa:57:8e:6e:34:99:59:25:85:ac:e4:
de:60:23:d5:98:34:66:88:1a:4a:5f:00:7c:ae:7b:d2:62:ad:
e7:d6:33:25:0f:a4:62:17:30:5f:f8:af:7a:37:6b:2b:24:58:
02:42:ec:3e:70:da:97:60:5f:8d:d5:97:f3:3e:6f:bf:22:f8:
5d:c5:d8:7c:98:69:f4:11:36:f4:6a:be:34:c2:a2:c2:83:90:
e7:42:82:72:97:e4:45:37:8e:01:2e:36:ae:70:f4:b5:ef:56:
88:be:68:6f:bd:5c:a9:44:41:2a:62:18:a0:65:1f:08:ee:bc:
db:ce:b9:fc:52:90:e0:be:d5:a8:77:b4:63:02:3b:2a:1f:41:
db:e0:43:a2:27:e7:f7:62:39:13:fc:6e:4e:bd:b1:d0:43:65:
25:bb:3c:d9:47:e3:57:d4:a7:a0:53:66:ea:71:88:c7:34:dd:
00:4b:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:59:31 2026 by rpki-client