
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40a934a1-9054-3c44-ac89-d2a58499d523.roa
File: 40a934a1-9054-3c44-ac89-d2a58499d523.roa (raw, json)
Hash identifier: mXVMBlJ7ouzrfZlwAtf6yty5IEcyle1hDsaYJlW+H3Y=
Subject key identifier: E7:0E:A5:5F:AE:E1:17:5A:A7:7E:F9:87:6C:25:CA:BA:20:85:D9:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B202FB4FB93A3723588B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40a934a1-9054-3c44-ac89-d2a58499d523.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 397197
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:02:fb:4f:b9:3a:37:23:58:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=797d2ed1-dd9c-4eb4-abb7-be728f3ec0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:c8:81:79:44:11:a9:d7:37:2d:44:15:83:
b5:2d:1a:f4:a2:83:4b:0e:c5:9b:77:b5:73:35:1d:
ae:f4:0f:8e:ac:13:fc:d0:66:ab:7d:8e:90:ca:60:
7f:b2:6b:eb:f7:3e:bb:e1:ba:48:0d:c4:1e:75:6f:
68:4b:5f:15:ab:25:66:33:29:d1:1e:dd:5f:6e:69:
11:c3:a5:b3:67:e7:a3:bd:26:b0:c3:2b:bb:10:77:
fe:d3:1a:05:73:67:62:6c:8c:ce:7a:11:57:71:bd:
de:de:43:22:01:6f:c0:35:df:c5:0f:3c:dc:fe:da:
79:ae:2c:e5:ad:1d:07:a5:03:09:33:28:3a:97:85:
29:6c:8c:21:73:d5:79:f2:a4:24:ea:e3:6b:f2:7a:
ad:3a:bd:c6:e7:89:61:2d:45:80:15:85:bf:aa:62:
9a:d9:e2:9f:ce:c8:51:c5:48:13:a4:71:92:53:8d:
64:73:48:21:b1:2d:db:d5:0f:61:6a:6b:29:ae:ea:
c1:ff:c1:0f:ae:b1:92:e8:20:e6:f6:6d:97:f6:a2:
19:c7:5f:d0:73:4e:e4:0b:40:18:3d:d3:a0:2b:54:
96:8f:89:3b:67:66:58:d1:74:8e:88:f6:84:71:85:
83:ba:4b:7a:eb:6b:0a:fb:72:1f:3e:3d:0b:b7:ba:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:A5:5F:AE:E1:17:5A:A7:7E:F9:87:6C:25:CA:BA:20:85:D9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40a934a1-9054-3c44-ac89-d2a58499d523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:01:ce:52:6f:70:37:42:0d:9e:19:af:24:ed:47:16:92:f2:
96:64:e1:75:f9:22:33:b6:1b:5b:97:a2:52:28:f9:7f:f3:d7:
9a:0c:bb:89:c5:10:6f:3b:65:77:c1:00:b0:4a:6a:4f:03:88:
11:b5:23:d0:5c:85:c0:b2:7e:22:c7:33:1a:94:ed:c2:32:16:
c6:e5:6d:d8:a5:11:97:57:b8:1f:06:d4:dd:67:ee:15:26:aa:
c6:0a:47:d5:04:ed:fe:5a:e4:44:83:3d:10:5a:b0:63:1e:81:
d0:26:4b:ba:86:b7:cc:e9:c2:68:69:a5:b3:f2:27:1a:76:15:
f7:2b:c8:a7:c8:a7:f8:06:6b:80:27:57:49:c5:dc:8a:08:fd:
b3:17:01:15:73:e1:26:3f:02:6b:57:b5:ef:33:1d:e5:c1:21:
e2:61:c6:40:b5:88:49:60:58:3e:f4:ed:96:1c:b0:26:34:6e:
86:e7:e6:a1:ce:07:54:b0:37:6f:59:d8:ef:66:c8:be:bf:a4:
05:81:cc:f4:42:29:83:7f:a4:42:65:30:2e:42:30:ca:d1:29:
60:a0:1e:19:8a:31:47:9d:b9:b3:79:e5:9c:90:27:a5:ab:e8:
8c:08:1c:b8:b2:6b:fe:77:a1:a5:2f:60:fe:4e:f0:6d:3a:30:
b6:4f:1f:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71sgL7T7k6NyNYiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Nzk3ZDJlZDEtZGQ5Yy00ZWI0LWFiYjctYmU3MjhmM2VjMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEHIgXlEEanXNy1EFYO1LRr0ooNLDsWbd7Vz
NR2u9A+OrBP80GarfY6QymB/smvr9z674bpIDcQedW9oS18VqyVmMynRHt1fbmkR
w6WzZ+ejvSawwyu7EHf+0xoFc2dibIzOehFXcb3e3kMiAW/ANd/FDzzc/tp5rizl
rR0HpQMJMyg6l4UpbIwhc9V58qQk6uNr8nqtOr3G54lhLUWAFYW/qmKa2eKfzshR
xUgTpHGSU41kc0ghsS3b1Q9hamsprurB/8EPrrGS6CDm9m2X9qIZx1/Qc07kC0AY
PdOgK1SWj4k7Z2ZY0XSOiPaEcYWDukt662sK+3IfPj0Lt7owyQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOcOpV+u4Rdap375h2wlyroghdkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBhOTM0YTEtOTA1NC0z
YzQ0LWFjODktZDJhNTg0OTlkNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAOAc5Sb3A3Qg2eGa8k7UcWkvKWZOF1+SIzthtb
l6JSKPl/89eaDLuJxRBvO2V3wQCwSmpPA4gRtSPQXIXAsn4ixzMalO3CMhbG5W3Y
pRGXV7gfBtTdZ+4VJqrGCkfVBO3+WuREgz0QWrBjHoHQJku6hrfM6cJoaaWz8ica
dhX3K8inyKf4BmuAJ1dJxdyKCP2zFwEVc+EmPwJrV7XvMx3lwSHiYcZAtYhJYFg+
9O2WHLAmNG6G5+ahzgdUsDdvWdjvZsi+v6QFgcz0QimDf6RCZTAuQjDK0SlgoB4Z
ijFHnbmzeeWckCelq+iMCBy4smv+d6GlL2D+TvBtOjC2Tx/k
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:43:04 2026 by rpki-client