
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefbc0b6-b31c-3e63-b193-fbc8163378c1.roa
File: fefbc0b6-b31c-3e63-b193-fbc8163378c1.roa (raw, json)
Hash identifier: +VP4xmSSIMP2lMuZsY/QZQZLJgVc7OsPlOfV3lnHTyw=
Subject key identifier: 6B:BA:D3:C2:D3:72:66:6A:E0:0F:FE:A2:42:A4:7D:05:F5:1E:53:77
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4987A96A0B681919806DCD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefbc0b6-b31c-3e63-b193-fbc8163378c1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36620
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:a9:6a:0b:68:19:19:80:6d:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f92975d4-caaf-43f2-90fe-9bf4930366c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:47:35:6a:29:53:5e:7c:07:b4:be:13:f7:
94:44:74:76:3c:b2:88:dc:a3:9a:0c:ca:65:f0:a3:
54:19:ad:27:93:9a:7c:3f:50:56:ea:e9:62:81:ed:
4c:6a:d2:01:a5:5c:7e:d2:c0:1d:bc:1c:b0:7e:dd:
30:cc:8e:81:32:fa:3f:df:60:e6:68:a3:95:34:22:
31:d5:84:09:6d:8b:24:f2:22:6d:15:7a:b3:9a:85:
42:b8:a5:bf:e3:5d:1c:ea:f4:53:f7:83:18:91:e3:
69:c9:df:06:45:c3:b7:ac:34:d2:80:1d:d8:9b:a0:
27:c5:76:0b:fb:12:fe:de:19:10:29:ac:c7:68:60:
13:f1:a8:e9:63:d6:88:e7:32:3d:05:3d:21:30:74:
22:ee:bc:82:4e:2f:ae:99:73:bb:d1:79:24:19:9d:
96:e2:3d:3e:b8:dd:b2:26:52:b0:3b:af:74:21:90:
1b:25:4e:66:f8:6c:88:cc:ac:cf:07:84:76:a1:5f:
70:88:f1:f0:50:68:97:ac:d7:1f:5c:ec:52:40:05:
f9:06:0d:9b:6c:ab:87:a3:0a:56:a0:d8:5c:42:3b:
f9:d1:64:3e:e9:34:26:fc:ab:d1:8c:1f:a8:dc:9e:
f7:8d:b8:6f:39:ff:9f:91:aa:54:47:65:4a:54:e7:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:D3:C2:D3:72:66:6A:E0:0F:FE:A2:42:A4:7D:05:F5:1E:53:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fefbc0b6-b31c-3e63-b193-fbc8163378c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:d8:97:5f:3a:42:f3:08:27:6a:9c:ea:9e:11:15:d2:6d:37:
5b:df:5e:62:e3:7b:b5:a1:40:45:db:0d:a5:57:10:83:c0:ad:
df:7d:cb:54:28:36:ea:a0:ea:28:70:c6:f7:88:4a:07:b1:78:
ec:04:f2:bb:87:1f:29:69:5f:e9:d1:e5:ce:70:76:7f:38:70:
3e:26:8f:48:04:15:bb:16:2e:59:bd:b7:1e:0e:f1:b3:c1:4a:
83:00:94:85:10:53:0e:01:b6:1d:87:63:30:a8:39:6b:e7:26:
14:e2:b1:dc:f2:6d:3d:dd:a1:06:2e:1d:36:72:44:a4:1f:b1:
e3:46:c9:45:cf:cc:0a:c1:1a:0c:26:10:58:62:f6:0f:05:1d:
f7:83:5e:a1:32:de:fd:dc:f8:da:9f:64:aa:54:06:bd:9c:45:
1a:39:2c:73:7c:cd:8a:21:aa:5a:b5:1c:fa:c0:97:cf:24:a7:
34:be:34:06:50:91:3c:32:55:f2:32:34:67:dd:7e:19:56:b5:
62:04:ff:ed:a5:f5:a1:e0:90:fc:ec:4b:cf:8f:72:68:f8:5a:
04:73:d0:25:2c:b7:49:42:78:ae:ca:ab:04:63:0b:c7:81:40:
84:ba:29:60:05:cc:08:7d:69:c0:3a:ed:d1:cd:0e:25:a1:ed:
15:46:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:20:16 2026 by rpki-client