
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa
File: c209e324-7485-32ab-b729-eed7355b60cf.roa (raw, json)
Hash identifier: IZESvFVmf1qiAg2dtf1JGUsNQQMRUJcFLoIMEhWKiiA=
Subject key identifier: 2A:B4:92:A7:38:7D:BA:86:68:E1:61:85:24:AE:F7:94:A1:29:C8:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497334DA6722750C5D239340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396549
IP address blocks: 2001:503:83eb::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:34:da:67:22:75:0c:5d:23:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=38f7ff28-bcdc-406b-bf66-cde8b38f0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:98:be:69:a3:34:14:28:ab:41:6c:e1:f6:
1f:e3:32:60:ae:f2:ca:3a:1c:d5:0c:f7:63:9c:d5:
22:3e:ff:18:79:7a:19:19:75:29:e3:a5:1e:52:c6:
f0:99:fd:18:35:d7:68:bc:4f:a8:95:cd:03:09:ed:
dc:b6:88:d0:a5:67:da:a6:1d:57:7f:13:41:40:20:
bf:59:3a:5c:8a:4e:7d:e9:39:fb:d6:14:18:3d:14:
97:7b:1d:17:d4:6f:4b:6b:95:2e:0d:b8:4c:18:97:
48:68:04:a0:66:59:a0:ce:06:0f:b8:ce:4a:a8:cc:
c4:11:aa:5f:70:9b:03:ec:0f:78:f6:17:8e:22:c7:
00:da:33:e8:3d:26:79:13:fb:88:f3:98:4b:d8:af:
61:e8:2b:6d:c2:a3:50:a7:a0:a1:d7:5e:3b:ab:0c:
84:1a:8e:26:38:fc:54:f0:6c:3b:48:11:0e:38:cb:
eb:c0:23:ed:f4:9b:1b:f6:9e:f5:d8:87:68:df:d6:
c2:16:49:47:c6:6d:2a:5e:1a:f0:48:a1:39:19:ca:
30:99:b1:8a:f0:05:21:60:31:45:42:9c:f6:cb:85:
79:b8:3a:f4:39:6c:c1:b8:67:43:72:a2:ff:45:6c:
91:10:c7:7b:2f:19:f8:37:58:05:ed:08:a6:4e:12:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:92:A7:38:7D:BA:86:68:E1:61:85:24:AE:F7:94:A1:29:C8:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c209e324-7485-32ab-b729-eed7355b60cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:83eb:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:5b:05:8c:0c:aa:16:e4:0e:83:a3:80:9a:9d:4c:45:9f:c4:
da:50:c4:2d:a3:c9:e7:d4:64:7c:17:5f:fe:2f:bc:e3:3c:2d:
f0:03:2b:36:bd:bb:39:b5:e4:e7:11:12:ba:67:11:cb:ab:92:
b5:62:3b:0c:fd:5a:43:b8:fd:c6:7d:cc:37:a1:7a:3f:e0:d9:
77:ae:29:c9:2f:c9:8d:36:f5:b4:7f:0f:36:83:d5:2a:f0:3b:
82:d6:14:d7:2e:91:00:e2:0b:7f:18:d2:2c:2c:3b:bc:41:64:
bf:52:7b:57:26:c8:cd:f1:8c:3c:c6:0f:fb:d9:af:21:2a:16:
52:4c:97:73:80:17:af:18:19:80:a4:f6:53:07:28:fc:1a:1b:
61:87:82:ac:45:8a:fd:c7:4a:c4:d9:ae:d2:8c:57:c6:f4:56:
71:48:6b:5b:f4:a6:15:77:da:9f:f1:2e:35:92:23:08:1f:64:
75:5d:8e:79:ca:b9:ef:2f:17:57:8d:a2:4a:4f:81:bb:fb:70:
39:c6:f1:8d:37:fd:60:dd:46:b0:4a:ee:99:86:62:f1:a7:09:
2d:5f:5b:bb:14:dc:20:20:97:18:bf:c2:27:a3:79:b5:1d:69:
10:7a:6e:9f:03:7f:34:d2:ad:a2:1c:2f:ff:11:06:d5:bb:1f:
ab:3a:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:10:22 2026 by rpki-client