
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9128df5-eb66-3bf0-9d84-013423e466d9.roa
File: c9128df5-eb66-3bf0-9d84-013423e466d9.roa (raw, json)
Hash identifier: fhUcJbrUi/f7EW4Aor/oAkHC5TLayXwVnPwPwpDhhZw=
Subject key identifier: 9D:60:B6:7C:03:A6:C4:F3:2B:7D:72:6A:9D:77:6F:63:8B:E8:49:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498A5BA8B8643DAE70A7B6DC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9128df5-eb66-3bf0-9d84-013423e466d9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20431
IP address blocks: 2001:500:30ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:5b:a8:b8:64:3d:ae:70:a7:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fde8f8cf-d68f-43d3-b31a-c5fff08d6c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:c1:66:e0:1c:13:3c:5c:00:ab:5a:1e:d5:
dc:f1:cf:ce:c8:fc:8b:aa:c0:d9:f5:d1:6f:df:82:
db:2a:6c:6f:25:0c:b4:39:ed:38:cc:76:d9:32:94:
92:9a:41:48:8a:5b:4e:34:3c:c3:7a:bc:97:c7:a9:
c8:1e:50:01:ba:57:1b:cc:6d:8d:5c:b8:f8:ce:15:
b4:b9:a8:a9:99:2d:96:b2:c0:51:e9:61:90:7f:67:
2b:ea:91:34:e5:1d:ca:46:0c:b8:e0:a5:fb:91:63:
13:c8:b2:8c:97:69:24:74:2c:2a:f1:b3:ec:09:2e:
73:a1:3c:35:de:2e:d1:f1:d9:52:13:d5:47:3e:62:
1d:9a:18:10:c4:fd:85:ca:4b:ae:a0:51:92:63:5c:
eb:09:58:f3:f9:0b:8f:9e:c7:58:5c:f2:95:c7:27:
9d:f9:22:ff:39:1b:79:32:ff:73:53:5f:09:a2:c0:
49:71:6d:e3:7f:ff:10:41:28:14:b4:17:d2:5e:76:
ec:fc:df:41:64:9d:24:e8:11:25:cd:12:f6:06:dd:
c0:af:9e:57:4f:a5:b7:ac:81:99:5e:06:cd:46:d0:
ef:cd:85:d0:40:1b:f8:ca:82:36:85:68:c6:2b:5c:
1d:bf:0e:75:83:9c:9b:e9:c1:e6:3b:b5:bd:52:a1:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:60:B6:7C:03:A6:C4:F3:2B:7D:72:6A:9D:77:6F:63:8B:E8:49:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9128df5-eb66-3bf0-9d84-013423e466d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:21:8e:b7:30:31:c6:8c:8b:94:d7:aa:8f:f8:37:fe:3a:cf:
00:d4:82:20:74:3c:ff:99:4d:e4:73:47:92:91:a8:59:4f:0d:
f7:1f:bb:7a:ab:c3:0a:55:5d:9d:f1:31:7a:cb:97:1b:43:65:
50:95:00:d8:ae:52:9b:ea:41:05:fe:cb:bd:98:38:6b:d3:b4:
8b:52:c3:a2:c8:6b:d9:9e:cc:26:0d:45:5a:1c:6d:3d:b1:36:
88:c9:20:4d:84:61:4e:6b:80:70:d0:c6:72:fb:eb:15:7f:87:
d6:4a:a8:de:04:16:8a:f7:e3:42:af:12:f9:f7:23:49:79:fc:
09:de:c5:60:95:f0:95:72:1b:f2:61:1f:45:67:1b:3c:8e:0b:
54:9e:0e:a4:e1:7a:f6:b1:60:2f:a4:91:85:2d:a8:b7:b5:70:
41:94:f7:6c:2d:97:7b:e4:9e:e1:2d:2f:62:75:cb:37:1e:a3:
6f:a6:7d:2a:0a:be:cf:0d:2a:d8:1d:8c:74:bb:5d:19:65:63:
fa:17:7c:53:a9:8b:27:8f:66:d4:f1:97:97:70:8d:a5:8d:a2:
d4:c3:75:d6:a4:c6:b5:53:23:01:7e:51:8a:b2:cc:58:e1:3e:
06:50:75:11:52:33:56:3d:ea:5f:e5:45:b2:d3:4d:64:33:ed:
a6:c0:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:50 2026 by rpki-client