
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04013b7c-b179-3d17-bcf4-43597d8184d4.roa
File: 04013b7c-b179-3d17-bcf4-43597d8184d4.roa (raw, json)
Hash identifier: OSYTclfNZTbJLNeiwLWRw3UrCPefGLm+ZJW9GgLJWwY=
Subject key identifier: B3:CF:85:CF:28:01:FF:1D:47:0C:C1:4A:73:61:75:E8:52:D2:F2:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F75A64CED64750AC8040A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04013b7c-b179-3d17-bcf4-43597d8184d4.roa
Signing time: Tue 10 Mar 2026 14:28:41 +0000
ROA not before: Tue 10 Mar 2026 14:28:41 +0000
ROA not after: Mon 08 Jun 2026 14:28:41 +0000
asID: 396555
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:a6:4c:ed:64:75:0a:c8:04:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:41 2026 GMT
Not After : Jun 8 14:28:41 2026 GMT
Subject: CN=eda5af0a-5c8f-4613-b78d-7462cbfad062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:9f:cb:99:0f:c0:d9:b3:2a:77:c2:e7:b2:
6d:b0:29:0d:4e:09:40:86:07:c4:0a:4d:0d:fc:20:
5c:34:58:02:5d:40:bc:5e:4a:fb:8f:48:8e:21:5d:
0e:c4:9b:ec:f5:3a:cb:0a:9c:dc:50:c5:98:58:a3:
70:4e:dc:1d:0b:28:22:99:e3:d2:a6:67:6a:22:b5:
76:df:b4:13:8f:48:31:4b:c3:00:f2:38:cd:4f:fe:
9b:9b:40:10:9a:fe:4f:c2:f8:0c:b7:d5:9f:8e:10:
b2:65:28:e4:b6:aa:10:8e:a4:6e:82:3a:fb:f4:18:
af:73:ed:9c:91:23:d5:2d:c5:b5:9d:d9:19:8b:94:
89:48:31:0b:72:05:df:8d:51:7a:6d:56:59:04:a9:
46:d2:50:75:f1:21:8e:83:01:60:49:c3:02:82:4f:
59:d4:6f:91:95:f4:ab:14:6e:1c:bd:66:8a:04:58:
ae:3b:27:ca:2e:c4:85:01:4c:32:bc:63:f1:90:b4:
7b:7a:b8:f5:3a:bc:3e:43:7b:d5:50:4f:aa:b4:38:
94:3d:34:ba:e9:85:74:77:ce:9a:20:25:df:78:58:
0c:2a:c9:a4:81:12:33:88:58:e5:08:4e:b9:ab:9d:
05:7c:c1:19:fe:3d:45:25:36:a0:ea:a3:6e:f4:06:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:85:CF:28:01:FF:1D:47:0C:C1:4A:73:61:75:E8:52:D2:F2:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04013b7c-b179-3d17-bcf4-43597d8184d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:1d:db:4f:0f:94:c4:79:ed:c6:94:67:96:5e:15:c9:bc:9e:
a1:e8:fd:2b:0a:12:02:f0:d1:02:e6:2c:ed:aa:c0:e2:eb:39:
fa:a3:a8:79:d6:85:bf:26:07:73:97:16:ec:c2:71:6a:24:f5:
11:eb:6d:cd:83:58:9f:e4:3f:9f:89:18:f3:91:40:0f:a3:3f:
3c:8d:86:27:3a:08:6e:b6:bb:3c:e2:d5:2d:a8:bb:b7:26:93:
ae:23:3a:f7:b6:e7:56:73:d6:08:29:6c:82:f1:5f:4f:0d:90:
5b:45:07:18:12:23:80:a9:c2:6a:b7:f6:e6:04:73:04:10:cf:
0b:9b:a6:58:81:fd:f4:55:2a:b5:d0:5b:a6:e0:c0:e4:7e:a6:
10:bc:bc:aa:53:db:8d:e1:85:68:25:35:7a:c7:12:09:db:d6:
eb:fe:1c:a7:14:82:31:98:3c:36:47:e6:84:24:58:3f:f7:0f:
13:e0:b8:f3:4e:e6:5a:43:9f:31:d7:e8:dc:15:3d:71:40:b7:
f5:01:ef:a1:20:1a:06:d9:ac:39:54:48:26:25:36:a4:bb:e2:
20:68:e0:a2:cd:22:95:12:30:94:1e:c0:03:19:88:66:ab:de:
67:05:9d:06:3e:a2:cd:8f:30:d2:e8:a5:23:ad:73:70:79:91:
16:8b:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:13 2026 by rpki-client