
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bdfaab-482c-3944-b732-0dc02924b640.roa
File: d0bdfaab-482c-3944-b732-0dc02924b640.roa (raw, json)
Hash identifier: JACBo0KHCrLMf1ZDjZ+mTEQ7bA7RHBa8qWVvgJkxYeM=
Subject key identifier: 1D:13:82:1B:69:FE:5C:08:8D:34:E2:35:2E:B9:8F:6B:95:0D:AA:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4986B13428B7B67BA86989C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bdfaab-482c-3944-b732-0dc02924b640.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396546
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:b1:34:28:b7:b6:7b:a8:69:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e9d67d91-461c-433d-9108-55ff377cc2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:d9:c7:77:7a:e4:fb:fd:72:fd:b3:56:4b:
1d:ab:53:a8:db:4b:16:43:4d:10:44:7c:56:51:88:
99:70:da:60:62:f2:12:c2:4c:75:82:7e:78:28:11:
ea:5e:5e:9f:31:76:d9:d9:7a:44:f2:54:15:6c:a0:
c2:12:6b:f1:95:85:c4:67:28:33:6e:b1:d5:d4:9b:
41:0b:e0:dd:95:db:1a:f7:d4:c7:2c:91:34:d4:44:
28:41:f8:72:63:19:79:99:1d:2c:4d:4d:ea:7f:f3:
56:ba:de:59:45:ef:99:5a:36:6c:fd:11:5a:8a:d5:
ed:56:db:1d:06:c8:ad:d4:5d:c8:19:61:65:8e:6f:
9d:39:56:c5:29:c9:26:7c:42:1c:26:69:80:92:34:
b3:c2:da:50:43:58:ab:2f:cd:19:25:dc:21:2f:f8:
0a:c4:aa:81:ab:de:7f:6e:e0:62:65:a6:34:92:bd:
43:c5:f6:f2:9c:fd:56:24:e4:33:40:59:e8:52:2a:
1a:be:47:03:1f:9c:e7:5f:8f:48:21:6a:18:75:e6:
fe:a9:b2:f6:8b:29:a1:63:3e:fb:16:f7:a0:fd:fa:
c5:2b:ac:ed:a1:35:1b:43:bd:bc:64:d4:4b:12:b7:
5d:21:54:30:48:4a:76:ea:63:50:b3:4b:7c:5d:ff:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:82:1B:69:FE:5C:08:8D:34:E2:35:2E:B9:8F:6B:95:0D:AA:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bdfaab-482c-3944-b732-0dc02924b640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f7:a1:14:ab:2f:05:9b:f5:ff:19:6b:ab:ec:ac:0e:0b:f0:
df:ff:27:3c:e2:04:24:90:22:0a:e3:31:e3:cf:3b:ee:dd:92:
84:3e:cf:16:27:14:7c:56:09:d2:c1:9f:01:47:24:08:de:5b:
57:ee:06:44:39:f2:8e:c3:fb:0f:5b:c6:ce:af:4a:b6:59:88:
5b:b9:63:3a:a0:83:2f:93:5b:8a:91:52:6d:57:62:c3:0c:d2:
4b:26:3e:6f:f3:ed:62:c5:4c:da:c6:da:ca:48:02:3d:fc:e2:
eb:5e:9f:41:22:ee:14:d6:01:7a:e1:58:dc:ef:73:b3:5e:8d:
fa:7a:ad:f5:c0:77:e8:31:da:4d:56:5d:dd:f6:b2:33:89:6e:
14:c9:49:0b:10:cc:6f:25:c5:a2:f2:a0:d9:23:b4:c5:f1:7f:
d2:f7:00:81:ec:4c:2b:f6:b5:f6:ee:41:0b:0f:3d:e7:b7:90:
2a:5a:e1:e6:74:4b:14:b5:78:7a:7a:ba:09:02:d2:c5:94:00:
8f:a4:3d:80:8d:0d:f8:82:19:21:e3:95:b9:4b:46:d8:24:d4:
22:a5:01:0d:35:e8:85:c6:ab:57:89:a1:56:9f:d8:8b:a2:3e:
3a:2d:5c:e9:61:92:11:ce:4a:03:6a:0a:ac:2d:c8:31:51:d8:
47:1a:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:43:04 2026 by rpki-client