
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
File: 152ea318-14d3-3b70-9370-be6873222de0.roa (raw, json)
Hash identifier: zPtKDWrWlrMYrMaxI2l3915MFTxsTd2ORpp3SQw5HM0=
Subject key identifier: 58:71:3F:86:27:29:24:E0:A2:52:36:E5:9B:55:DF:F5:3E:F4:94:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D93255912D713A3C9098C6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 396551
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:59:12:d7:13:a3:c9:09:8c:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=f38d4409-0d4d-48da-af08-e8a5e97dc8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:e0:db:3e:51:a1:a0:af:aa:60:30:1f:26:
b2:ea:88:ef:6e:4c:a4:fa:35:c3:32:d7:1d:bf:12:
7e:5b:d8:4f:b9:58:8d:ae:e8:78:12:c6:3b:5f:dd:
fa:0e:6d:a0:c4:ec:cc:0b:9a:17:9f:2a:d5:0f:47:
40:f6:90:7d:9a:11:c0:70:4d:7a:fe:f3:2c:9c:bb:
a6:1e:00:9b:23:49:28:2a:d4:04:22:5e:7d:14:4b:
8b:db:88:a3:08:36:9d:4a:e5:62:6e:42:bc:6e:7e:
a1:dc:85:51:20:7c:fb:7f:23:24:c0:72:e8:3d:74:
7e:2f:fe:4b:9a:7d:e7:f9:5d:39:56:46:56:32:25:
a4:de:7e:c1:b8:5a:14:d4:ff:92:89:b1:31:8e:06:
ac:72:8a:d5:86:cc:9a:a1:ad:e1:a9:24:69:b8:cf:
07:6b:74:28:03:fd:65:f0:ee:c9:5f:03:da:67:98:
14:f4:ab:9c:55:cb:81:97:51:b8:b0:9d:03:72:b8:
0c:ac:68:e9:54:b9:5c:91:d6:50:d1:38:76:4f:fd:
35:cb:35:87:24:60:d9:61:e1:4e:92:bb:25:e7:2e:
fc:c8:2a:32:b4:d3:b6:68:14:df:23:d0:93:07:82:
31:d6:c0:c0:1c:72:7b:5d:40:c9:39:d4:d3:99:26:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:3F:86:27:29:24:E0:A2:52:36:E5:9B:55:DF:F5:3E:F4:94:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:4c:e1:be:54:e2:f0:1c:3a:df:4b:14:79:6d:11:ba:cf:d0:
dd:ab:62:1c:5d:da:7d:f2:97:94:c6:d9:f2:87:5b:78:88:7e:
09:e8:d3:91:23:ba:62:cf:15:5c:6a:d5:18:8d:9c:b8:2f:eb:
1d:84:97:a7:d7:07:cf:33:9b:df:a8:62:b6:65:4c:1e:1d:82:
e4:e2:7a:80:81:7b:b3:91:8c:0d:ca:d6:5e:75:eb:9b:af:d5:
98:fe:e3:8d:f4:40:92:00:95:bd:7b:bf:1a:c5:ea:e7:af:d6:
a6:14:a1:4e:f3:74:c1:4b:2b:33:a2:af:c1:33:30:f1:b4:36:
bb:36:eb:e8:43:a8:58:52:c5:0c:4b:75:33:9f:77:31:00:84:
c5:b9:91:b7:b0:8f:ed:14:ce:7e:9a:30:ea:cb:77:b9:50:79:
3d:9b:b4:d8:81:68:a0:d3:1f:c7:4c:ba:b5:12:e7:7f:9b:d2:
96:08:77:b4:94:30:5d:e0:c9:f5:5f:1d:96:b8:74:d2:9b:f5:
8a:d9:3f:e1:63:7e:e3:a6:1f:4f:8c:4b:24:b3:2b:0a:d9:f9:
63:de:d4:a9:3f:7c:77:a8:42:92:ed:70:be:2e:0e:84:ae:0f:
f8:65:8b:69:0c:59:54:7a:f7:7a:1f:35:a4:7b:55:9d:c5:2f:
98:16:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:29 2026 by rpki-client