
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a00994-601a-38da-b44b-a588a3a9a8fa.roa
File: 04a00994-601a-38da-b44b-a588a3a9a8fa.roa (raw, json)
Hash identifier: QWiH9f1xFHe1D0LIF3YZnuLOO60t5Imo+O8E8BQBenM=
Subject key identifier: 42:D4:30:3D:CD:5B:51:33:DB:6C:87:77:3F:20:CA:86:0A:1B:38:DE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49737D4871D0DD1B70BA8180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a00994-601a-38da-b44b-a588a3a9a8fa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397204
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:7d:48:71:d0:dd:1b:70:ba:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f96f6738-1215-4fba-af7a-462b2596ccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:16:75:50:d1:b7:ce:b9:a2:3b:75:61:dd:
4b:0f:4c:2d:47:00:20:0e:80:5d:5b:98:aa:c4:77:
69:10:62:fc:80:94:81:b4:60:06:d5:77:21:84:70:
72:98:20:9e:80:bd:7e:7c:1b:78:e3:89:9b:15:88:
95:74:23:c8:81:63:0b:bf:72:5f:3d:e5:f1:0b:ef:
11:e3:38:b6:e5:56:76:83:6d:84:89:bd:8a:23:8d:
d7:02:4c:3f:b1:60:68:66:72:89:ab:9f:c0:4b:06:
86:8d:37:39:29:83:da:e5:e3:7e:e3:34:f3:97:ff:
a4:06:1b:bb:9e:8e:7b:aa:7e:21:44:b0:5c:1d:94:
ee:8c:79:77:6a:44:a5:f5:ca:ef:12:a0:4c:21:59:
35:e9:29:39:a6:22:ba:ab:e2:f2:3e:a7:42:52:57:
2a:f8:27:94:05:02:10:08:2c:b3:1d:60:07:e7:62:
10:c5:78:a6:38:74:b4:71:ee:fa:5d:fe:cf:a3:e2:
a4:c4:b7:23:cc:25:cc:4d:9b:d5:11:87:b0:24:ee:
02:23:4c:05:0e:3b:6a:cc:5a:27:6b:f6:37:2f:05:
6e:07:b9:9f:e8:ec:2b:a1:9e:b1:7e:3d:a7:5f:3a:
8d:dc:b9:fa:e9:51:70:84:d7:0d:1c:8c:7d:1b:ca:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:30:3D:CD:5B:51:33:DB:6C:87:77:3F:20:CA:86:0A:1B:38:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a00994-601a-38da-b44b-a588a3a9a8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:16:31:31:9a:9a:4c:4f:1e:21:33:a7:14:ad:9b:1a:14:63:
fe:b9:c6:09:ce:b0:46:bf:01:f0:35:19:29:34:da:91:7b:e4:
7d:c2:fe:d4:2c:2d:40:f2:c9:08:dc:1c:bc:26:b7:52:09:be:
f7:8e:24:5b:22:6d:c9:02:ff:da:a0:6f:92:5b:50:07:c5:5a:
65:54:81:0f:9a:63:87:6e:79:7e:04:90:eb:17:dd:c5:4c:40:
ad:30:2c:b7:3f:fb:b9:30:4d:d0:ea:05:c3:9d:39:ed:c2:7f:
66:96:76:fa:81:72:62:c8:50:93:08:53:ac:6e:fe:16:01:fb:
ba:a8:e3:f1:af:49:f3:1f:b0:5b:a4:5c:72:59:5c:db:a1:e6:
96:68:e3:c6:88:bb:00:c1:6a:f7:c6:d9:85:8f:87:98:ee:a3:
4d:e6:16:09:ca:be:c6:17:6b:26:21:73:c3:1a:5a:ed:fc:b4:
71:62:48:d7:17:6d:08:89:69:04:6c:bb:aa:38:21:25:0d:8f:
a3:40:01:dd:6a:53:fb:ec:9e:61:b9:1a:28:78:59:e4:0c:9d:
ed:c9:07:a4:ad:c2:b8:4c:10:fc:7a:41:fa:52:44:4b:c3:f3:
ca:0e:a8:3a:24:53:dd:ed:60:6a:27:f2:a0:d2:9e:bf:b7:93:
bc:e0:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:40:25 2026 by rpki-client