
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397872fe-2590-3a27-8f85-af8248204908.roa
File: 397872fe-2590-3a27-8f85-af8248204908.roa (raw, json)
Hash identifier: IpKUoZy//1+DwNiA6x+VKJpLQ/9lS71mityCJT9Sv1w=
Subject key identifier: 20:C0:C5:00:90:24:38:24:08:14:9C:4E:35:30:C7:E3:F5:C2:CD:EE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFFA5202E4A1E62B1298D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397872fe-2590-3a27-8f85-af8248204908.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 36617
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:a5:20:2e:4a:1e:62:b1:29:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d3f2848e-120e-4761-9df0-69936761185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:99:b1:c5:eb:79:a4:47:7b:65:fa:78:ef:
11:7f:2e:ee:de:66:6b:74:ef:92:f8:f2:75:04:a3:
cf:3e:bd:fe:dc:2d:4a:f8:bd:a9:5a:e0:4e:cd:d2:
85:a7:60:ec:0b:2b:e8:fa:10:09:61:3f:11:07:b9:
22:78:35:6f:7d:5d:5c:99:18:45:d3:93:a3:e8:cc:
a1:52:f8:6e:e9:2d:78:07:af:ca:e4:24:50:2b:a8:
7a:25:1c:b2:8b:10:be:8d:45:8d:86:c7:7b:2a:73:
3b:07:2c:41:0e:16:a5:ec:12:36:3d:64:1e:1f:c2:
f8:59:89:ba:f3:0b:34:57:17:df:83:dd:85:7c:5d:
57:6b:df:32:a5:c2:b7:ac:15:57:15:3c:18:36:c9:
48:90:02:7b:09:71:65:b3:2f:c6:c3:1b:28:9b:b4:
cc:01:0c:cb:5a:4e:86:54:0f:dd:56:8c:55:1c:08:
0c:23:80:55:a6:1a:0d:5d:25:9f:07:6c:a2:45:3b:
1e:4c:b7:08:fe:6a:8d:e0:d7:4b:ec:1d:48:5c:3d:
b1:25:fd:a7:e4:c3:8b:de:d4:91:24:a4:d8:70:1f:
88:64:f1:64:0c:86:4e:58:56:34:ad:4e:c6:89:85:
86:ef:b7:df:d4:c4:75:ee:cd:15:99:43:d5:61:42:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:C5:00:90:24:38:24:08:14:9C:4E:35:30:C7:E3:F5:C2:CD:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397872fe-2590-3a27-8f85-af8248204908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:cc:fd:d8:d0:b7:bf:56:8e:d1:be:82:42:07:ed:0e:a5:79:
d8:2d:6b:e6:9b:80:00:5f:7d:4b:11:e8:96:da:0f:07:89:d4:
e2:46:0e:42:8e:da:57:7b:49:7c:03:2f:85:d2:58:b7:d0:87:
fe:61:ff:18:90:fc:19:6a:3d:ae:1a:1a:2e:4f:fc:37:92:43:
5e:7a:e6:a5:e1:0a:0f:94:f9:9e:0b:02:8f:bb:66:00:17:68:
6b:69:32:16:67:ba:f4:1d:0d:bc:60:fc:2d:b4:cf:54:35:fc:
b5:c2:12:f4:f1:ce:34:ed:a0:42:2d:ce:22:d7:91:db:00:3c:
12:79:cb:15:38:a1:02:1e:db:97:1a:20:e6:e5:d0:6e:98:b7:
f1:f9:93:6d:32:53:ef:b8:91:07:a3:27:48:ed:c2:23:8a:6b:
cd:9c:a2:bc:b9:b8:9b:e2:71:d3:bf:98:b6:0f:12:5c:81:9d:
45:b9:72:4b:5b:70:38:f2:97:0c:11:73:b3:29:40:cf:3a:77:
20:fe:b0:59:f6:40:a9:d4:b2:f4:a7:85:30:6d:a0:9a:5a:69:
c1:51:39:88:8f:48:59:5a:7d:94:4e:2d:7b:4b:86:05:a8:8f:
3e:b9:8b:40:a7:52:9a:01:4d:2b:a6:00:93:d6:42:3a:e5:f1:
11:7f:f0:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/6UgLkoeYrEpjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZDNmMjg0OGUtMTIwZS00NzYxLTlkZjAtNjk5MzY3NjExODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRKZscXreaRHe2X6eO8Rfy7u3mZrdO+S+PJ1
BKPPPr3+3C1K+L2pWuBOzdKFp2DsCyvo+hAJYT8RB7kieDVvfV1cmRhF05Oj6Myh
Uvhu6S14B6/K5CRQK6h6JRyyixC+jUWNhsd7KnM7ByxBDhal7BI2PWQeH8L4WYm6
8ws0Vxffg92FfF1Xa98ypcK3rBVXFTwYNslIkAJ7CXFlsy/Gwxsom7TMAQzLWk6G
VA/dVoxVHAgMI4BVphoNXSWfB2yiRTseTLcI/mqN4NdL7B1IXD2xJf2n5MOL3tSR
JKTYcB+IZPFkDIZOWFY0rU7GiYWG77ff1MR17s0VmUPVYUJG1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDAxQCQJDgkCBScTjUwx+P1ws3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzk3ODcyZmUtMjU5MC0z
YTI3LThmODUtYWY4MjQ4MjA0OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJbM/djQt79WjtG+gkIH7Q6ledgta+abgABffUsR6JbaDweJ1OJG
DkKO2ld7SXwDL4XSWLfQh/5h/xiQ/BlqPa4aGi5P/DeSQ1565qXhCg+U+Z4LAo+7
ZgAXaGtpMhZnuvQdDbxg/C20z1Q1/LXCEvTxzjTtoEItziLXkdsAPBJ5yxU4oQIe
25caIObl0G6Yt/H5k20yU++4kQejJ0jtwiOKa82cory5uJvicdO/mLYPElyBnUW5
cktbcDjylwwRc7MpQM86dyD+sFn2QKnUsvSnhTBtoJpaacFROYiPSFlafZROLXtL
hgWojz65i0CnUpoBTSumAJPWQjrl8RF/8KQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:44 2026 by rpki-client