
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e0af7b5-18f1-32d0-b225-84d936e8a0e7.roa
File: 6e0af7b5-18f1-32d0-b225-84d936e8a0e7.roa (raw, json)
Hash identifier: 0VqccZvD+0wld8MzF4+APpNHameIfmF7pKKbxnDU+Fw=
Subject key identifier: BF:85:8E:4E:CD:12:30:C8:3A:3C:69:D8:E1:2E:8C:75:28:BB:34:F0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498990A467F659006BA2CFA8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e0af7b5-18f1-32d0-b225-84d936e8a0e7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396553
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:90:a4:67:f6:59:00:6b:a2:cf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9ec171a8-0331-463d-b141-c237226aef9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:47:27:97:99:08:9e:b4:5f:c6:0b:5f:76:
be:bb:58:49:83:89:0e:64:83:39:9e:a8:f1:db:96:
83:47:b1:04:68:f4:7f:d8:20:2c:dd:0a:c4:3e:87:
a0:28:0b:46:9d:7a:73:02:bf:d5:70:b8:1c:e3:6e:
de:01:96:8b:3f:b9:19:24:78:42:36:11:62:f7:2f:
f0:dc:5e:28:6f:ec:ab:d9:ad:23:70:5c:eb:91:46:
93:51:c2:57:ff:0f:12:f3:bb:a2:90:8f:f4:73:46:
d5:f6:29:83:af:15:f1:ba:af:76:cd:88:0c:2b:73:
14:a8:8c:72:34:66:58:0b:43:e1:98:fe:e2:55:f2:
ca:57:ca:99:68:e5:03:50:63:6e:8a:e2:9a:1a:6e:
06:23:c2:cb:2a:fc:51:98:a3:6f:a8:c1:ba:97:f3:
38:7d:ea:45:3e:db:64:52:7a:92:c3:f3:b0:b6:4d:
b6:42:c9:69:57:7a:ce:33:46:bd:38:e4:b1:44:43:
8c:81:88:e5:94:19:eb:44:6e:95:ae:31:d6:63:88:
51:8d:f0:6f:09:d9:8b:69:5c:9c:eb:d0:19:55:f5:
90:dc:d1:fc:ac:1c:9b:9f:48:09:53:99:22:4e:ad:
8b:f5:62:c7:94:c5:ff:9a:6c:d5:89:f6:a4:0b:9a:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:8E:4E:CD:12:30:C8:3A:3C:69:D8:E1:2E:8C:75:28:BB:34:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e0af7b5-18f1-32d0-b225-84d936e8a0e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:09:60:8d:87:54:33:86:63:5e:0e:00:14:37:c3:d3:70:48:
a4:c3:14:b7:d8:84:47:a3:d5:43:ec:a0:d6:75:33:2c:00:d9:
3d:45:30:27:03:c8:27:6b:c0:26:72:2d:ec:29:ed:f8:40:74:
be:a8:38:0b:91:c1:46:ec:ac:de:61:db:b2:11:80:a7:19:97:
15:ba:fb:36:05:60:38:c6:a1:05:09:b3:83:f8:d2:1c:a6:37:
ae:d9:2b:9b:4e:ca:ec:a2:55:d7:07:d1:e7:ce:3c:dc:91:74:
13:84:51:02:d5:44:a0:50:5e:39:32:a1:89:78:a4:c8:33:75:
fa:f2:04:d0:5d:d4:02:c5:10:cf:77:53:33:58:ac:bf:c4:32:
dc:47:db:c9:9c:95:bb:44:58:ac:d3:bb:dd:90:60:b2:ae:3e:
4c:16:f1:c1:66:7e:29:6f:ac:5a:1a:71:9d:cd:e6:25:e3:25:
86:4b:94:8f:d8:96:ea:28:78:16:6d:7f:94:69:c2:ea:19:3b:
c3:f2:6f:94:f1:2b:47:3c:35:51:10:14:51:96:3c:aa:1f:87:
77:2d:ca:3b:4f:1e:78:86:64:9f:27:a4:8e:b2:ee:4e:60:a5:
e4:e0:82:46:ff:2a:bf:0a:b0:ea:f8:14:75:33:9a:07:b0:bc:
9c:73:4f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:17:28 2026 by rpki-client