
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf51204-bd90-3122-9548-4485b65a0303.roa
File: fbf51204-bd90-3122-9548-4485b65a0303.roa (raw, json)
Hash identifier: BxtqNF6b6yWG+FXcH5NKR5GN7Bm0rTQ68yaaVJkRzG8=
Subject key identifier: 14:16:15:66:2F:8E:A4:12:57:59:E0:44:D9:3D:1E:CF:5F:94:5A:A3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF01CAA98E6728F0970429980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf51204-bd90-3122-9548-4485b65a0303.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 396551
IP address blocks: 2001:500:13f::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:aa:98:e6:72:8f:09:70:42:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=3a8c72c0-612d-421f-8ded-2dc90975aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:9a:d8:5a:e5:ff:22:59:2f:8d:b1:be:21:
fe:b6:d7:7c:3f:c0:d5:6f:7d:e7:2a:27:21:bf:d5:
b3:39:d9:97:10:c3:af:05:84:64:03:de:66:a4:73:
a5:86:62:f3:bd:8a:f3:ce:a7:27:5c:ed:47:9a:16:
07:b3:2b:68:e1:6d:a2:69:57:f2:cc:7f:77:1f:5c:
f4:7e:66:1d:40:84:11:26:81:58:25:b2:ed:db:4c:
6d:2e:cf:1d:91:c7:4c:11:fe:9e:1b:7e:6e:02:ca:
0d:2a:d6:de:d3:06:d4:88:8d:30:d4:97:9f:bf:70:
6a:84:df:de:27:c9:20:8e:00:81:d3:eb:7f:68:9e:
d1:90:2f:cf:da:01:4a:90:76:10:98:ca:fa:85:d0:
02:e0:42:c3:51:1a:cc:e1:7e:3b:bf:22:12:00:fb:
14:61:3f:09:3f:fd:50:29:c7:df:5a:08:db:05:79:
44:22:9a:d6:5b:f8:e8:9c:7a:cf:14:d9:7c:a9:69:
14:18:f1:44:51:1c:2a:f9:54:76:49:55:a3:27:22:
4f:82:65:4a:dd:fd:1a:12:ce:c2:de:c5:bc:1b:09:
cf:9d:fd:00:10:44:8f:fa:9c:85:fe:2b:52:7f:c7:
3a:f7:3f:02:24:9d:b1:31:e9:14:de:07:15:2d:48:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:15:66:2F:8E:A4:12:57:59:E0:44:D9:3D:1E:CF:5F:94:5A:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf51204-bd90-3122-9548-4485b65a0303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:13f:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b0:3c:fb:11:27:b1:a2:eb:bd:45:b7:63:64:9a:ee:0a:7c:
75:1c:7d:a3:8c:1e:82:eb:72:32:10:98:77:8f:69:f5:f3:94:
32:99:a8:d3:cd:dd:f5:ae:91:ca:2d:56:d9:e8:7e:34:48:07:
69:d3:b4:d7:03:bb:1a:d1:a2:c2:2f:25:37:8b:84:92:02:d6:
bb:1d:2e:22:00:c8:dd:c1:f3:8c:a6:9a:98:4c:8b:e7:59:a2:
e8:e3:f6:fa:99:ef:f7:20:8a:9d:49:45:83:87:33:d1:94:c8:
55:c6:3f:c6:dc:1c:04:f6:64:a0:ea:b5:f8:b3:21:ed:89:5d:
9b:82:24:9e:6e:f2:4e:53:e6:fd:b4:8e:5a:39:2e:af:e8:61:
d5:e9:0b:36:5c:09:8f:72:fa:a2:7d:be:f7:52:d4:56:98:48:
c2:c5:a3:20:b7:63:ac:9b:ae:2b:06:fe:d9:4d:01:a0:1c:2b:
29:16:17:b7:9f:20:8d:47:76:b8:98:14:25:26:02:09:14:0b:
19:e4:05:02:1a:65:aa:ac:38:13:23:40:87:aa:2d:ea:53:a0:
ee:96:99:0e:59:b2:26:d1:f2:09:af:ef:7b:3b:a7:37:d2:69:
40:e7:53:06:92:26:ec:ac:17:01:70:3c:45:a9:79:22:76:7e:
69:e5:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:04:31 2026 by rpki-client