
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa
File: 02bb886f-f584-31d8-8184-bf334024d9c6.roa (raw, json)
Hash identifier: BgqUW2fwIDbwtzzqZ6+JDawdT0Y/ACqajKUja6HtZJ8=
Subject key identifier: 6E:D2:4D:9B:99:9F:22:1E:70:28:17:22:9D:8A:DF:97:7E:42:FB:12
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0C036BB5858B3634281DBE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa
Signing time: Tue 03 Mar 2026 15:18:10 +0000
ROA not before: Tue 03 Mar 2026 15:18:10 +0000
ROA not after: Mon 01 Jun 2026 14:18:10 +0000
asID: 36629
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0c:03:6b:b5:85:8b:36:34:28:1d:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 15:18:10 2026 GMT
Not After : Jun 1 14:18:10 2026 GMT
Subject: CN=1ca6cea8-4ba3-4d7d-b981-b08911548f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:0b:cb:e7:ef:71:3d:c0:6b:74:e6:3f:87:
e9:62:c6:38:20:e1:9d:16:a1:84:9c:c8:0a:8e:04:
6b:f8:13:16:2a:d8:2e:20:87:95:46:4c:a5:10:65:
f0:9a:1f:79:84:7e:36:b3:d7:a0:c7:a7:5e:f9:e1:
41:8d:fb:90:b2:8c:9f:b3:a9:37:88:0f:af:28:b2:
99:ce:7a:84:e8:7a:5e:5a:d6:1a:aa:ed:3d:7a:8d:
d2:6f:0f:a7:8b:ca:72:9d:3c:52:46:eb:88:7f:3d:
d2:a7:da:f2:10:a2:44:49:93:fa:d1:c3:e0:85:1d:
5e:38:61:03:b8:7b:fb:81:14:8b:a8:a3:9e:2b:1e:
cc:38:77:ea:ba:82:e9:d3:d4:e8:6f:ba:93:27:f2:
66:1c:6c:ad:95:ee:95:50:31:c3:92:41:9e:c7:55:
46:f5:f3:ee:06:31:aa:af:71:b5:cc:71:3d:6d:9b:
c8:da:a4:d0:b9:57:95:98:ee:7e:2f:ff:9e:ac:5d:
f4:57:6c:10:36:e8:0c:50:42:15:7d:2e:71:91:4c:
98:0d:59:36:92:bd:1c:cd:b5:d8:96:aa:88:a5:1e:
30:df:a7:a8:39:3e:5f:96:29:49:34:6b:72:03:c0:
f3:04:1b:15:67:62:91:d6:cc:b7:6d:d6:32:db:15:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:4D:9B:99:9F:22:1E:70:28:17:22:9D:8A:DF:97:7E:42:FB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02bb886f-f584-31d8-8184-bf334024d9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:25:02:4c:07:26:8f:64:23:60:6d:f1:ed:18:8c:1f:12:dd:
06:73:4e:69:0a:4c:03:fc:52:07:97:6e:96:73:5f:8a:5e:b1:
0f:6d:04:fa:d0:72:2f:e0:77:9d:be:ec:01:dd:c7:8a:56:70:
b7:97:29:dc:ca:15:f0:23:67:8e:a5:72:15:f5:10:c2:7e:2d:
92:3e:20:d6:f6:a1:de:4d:ed:31:93:51:c1:96:28:b3:9d:6b:
99:71:67:9d:da:91:48:0c:a5:35:b7:3b:87:93:c9:d9:b2:ff:
f2:16:aa:fb:d9:f6:2e:2f:1c:4e:45:37:a0:c9:d9:74:96:bf:
c3:49:f9:00:74:32:1a:87:da:d5:d8:51:a9:5b:17:f3:69:1d:
39:7b:5d:d7:aa:6b:7e:99:99:07:f5:24:26:94:06:d9:38:69:
15:9a:d8:08:0a:dd:92:1c:a0:a7:65:b0:a8:6d:53:ce:f3:1a:
34:5c:fe:16:0a:cc:03:b1:9f:2f:c0:0d:9f:7c:16:c6:6b:2f:
3d:85:51:ff:36:ac:0d:a2:f5:36:8e:5c:e8:43:eb:fb:58:fe:
54:3f:bf:8c:6a:61:8d:62:88:f3:11:83:fe:68:98:f4:1c:af:
db:04:7d:d2:f2:ed:94:7c:1f:b4:26:0e:56:4b:54:34:3d:17:
5c:c4:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:35 2026 by rpki-client