
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa
File: 3668a0bf-f4b0-30af-8663-b9226839d3ea.roa (raw, json)
Hash identifier: iZ5IxAoMQVQg69mylSNXsoqo8R1xzqyZsDliKfh0keA=
Subject key identifier: C9:0C:B6:1B:AD:90:3F:0E:19:95:CD:D1:6B:09:86:D0:E2:CC:57:54
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D8C2AA92288A6559B7F62EA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa
Signing time: Sat 18 Apr 2026 13:00:30 +0000
ROA not before: Sat 18 Apr 2026 13:00:30 +0000
ROA not after: Fri 17 Jul 2026 13:00:30 +0000
asID: 397212
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8c:2a:a9:22:88:a6:55:9b:7f:62:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 18 13:00:30 2026 GMT
Not After : Jul 17 13:00:30 2026 GMT
Subject: CN=8a4eb336-4192-4243-94dd-35bbe3bf9734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:96:e9:23:a7:54:05:ad:1c:7f:39:58:c2:
67:2a:26:42:72:6c:8c:98:ee:8e:d2:28:44:b4:81:
6d:7c:b4:16:92:ab:c6:f6:d1:d1:3b:9e:d1:f9:32:
59:3e:7b:64:9e:8c:70:fd:79:87:34:b3:40:17:0b:
ac:e9:9f:47:b0:2c:2c:48:17:71:87:30:34:f9:44:
a9:df:2b:10:83:97:e5:f9:df:f4:e0:50:73:86:a3:
a8:df:e3:99:b5:3a:88:52:df:46:b3:ec:84:18:63:
8a:42:a2:93:c5:9a:82:b1:9e:95:81:a2:ae:25:0e:
25:39:41:2a:b2:a7:50:5f:60:c3:8c:c8:ea:66:7a:
a7:42:0e:84:3b:43:ba:1e:13:b3:4a:30:62:f6:79:
4e:60:fe:e0:1f:fa:be:54:f1:6e:54:d4:d2:2c:88:
f2:95:f0:59:3e:df:1c:37:df:ad:77:68:db:bc:40:
95:ad:dd:f1:08:ae:a3:21:73:8c:f8:c0:f5:9e:55:
c2:09:0a:d0:39:78:e7:e7:2c:08:ec:13:f3:08:9c:
99:c1:fc:af:1b:1a:85:3f:68:26:b4:a5:e7:96:17:
55:71:25:2d:01:ec:34:da:85:20:37:c4:d5:a0:d7:
47:91:39:63:60:e8:ef:ec:b6:67:12:e4:e2:35:33:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:B6:1B:AD:90:3F:0E:19:95:CD:D1:6B:09:86:D0:E2:CC:57:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:8a:25:e8:e0:3e:5c:14:3b:5d:b0:18:99:b9:1f:7e:18:47:
43:5a:e8:17:66:77:1e:66:93:5e:e0:ec:75:47:06:c8:ac:25:
d6:62:38:ef:89:ed:c3:6c:d2:1f:7d:e2:2e:d1:06:1f:46:da:
eb:88:5c:fc:1a:a8:ea:34:cc:81:62:65:4e:f1:6e:a2:2f:f9:
75:9f:7a:e2:cc:7f:15:8f:e3:27:e1:90:f5:67:84:de:d0:c8:
65:90:91:21:80:46:2c:bc:60:7c:58:a4:72:2a:43:20:32:ac:
08:30:b6:2a:39:a2:f1:03:e4:95:6b:c3:4d:a6:eb:29:51:e3:
a1:4d:00:ce:92:e8:4b:c6:9c:d7:79:28:4c:6b:dd:b2:a7:bf:
85:d3:f7:99:c8:78:18:45:de:89:23:d2:53:39:1d:da:2d:ef:
9c:f9:13:bd:30:d2:5f:fe:ee:9e:48:08:91:51:98:65:79:12:
ad:4e:be:31:58:ce:28:25:85:1a:79:90:9b:ad:2a:55:f6:dd:
ec:d4:59:d9:7d:34:4e:b6:c2:09:fb:e2:e2:30:f8:66:8b:2e:
62:99:4d:5f:f7:74:b1:07:f7:6d:7e:4a:c6:81:30:70:02:c6:
1d:6a:f8:48:d8:26:33:0e:d4:fe:0d:49:32:87:8c:aa:a6:b1:
62:bb:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:25 2026 by rpki-client