
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/728ab875-333b-3a04-bd97-6345b2cce571.roa
File: 728ab875-333b-3a04-bd97-6345b2cce571.roa (raw, json)
Hash identifier: OQZ+Ihsp5p92WaRwic+vFbMX+Xch9Tl6LDWhGUmvEnY=
Subject key identifier: 77:93:74:07:88:FD:F9:FC:51:79:60:D0:C6:55:7C:63:BE:56:7D:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F759CB7E6111A4A06A06D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/728ab875-333b-3a04-bd97-6345b2cce571.roa
Signing time: Tue 10 Mar 2026 14:28:36 +0000
ROA not before: Tue 10 Mar 2026 14:28:36 +0000
ROA not after: Mon 08 Jun 2026 14:28:36 +0000
asID: 396827
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:9c:b7:e6:11:1a:4a:06:a0:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:36 2026 GMT
Not After : Jun 8 14:28:36 2026 GMT
Subject: CN=8105d01b-c859-4b9d-b823-00fcf8b40119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:5f:48:08:81:ed:2b:1e:08:60:fa:74:11:
1d:ba:6e:30:5c:19:c0:c9:01:d9:70:98:12:c8:96:
e0:87:9c:08:a1:56:33:ac:9f:46:dc:a7:6a:bb:17:
60:73:6a:c0:d9:5e:85:0d:0e:1f:54:65:79:9b:22:
bb:84:90:8d:18:f3:00:d0:96:d6:29:07:0d:d2:a6:
0a:f3:44:73:90:b9:2e:99:3c:36:1d:56:94:b3:04:
6f:39:18:04:02:fe:15:bf:21:f5:1c:34:5b:47:2b:
80:89:d1:71:44:04:b5:bb:d3:3e:87:91:e2:d7:bc:
0e:5b:2b:7a:d0:fc:a1:0f:4d:db:05:88:06:5e:1c:
89:67:08:e7:bd:ac:c6:51:d1:c2:02:40:a4:5f:78:
60:d8:1a:86:39:0c:d4:5a:2f:51:5e:ce:70:3b:a8:
9e:74:f9:36:45:f2:64:33:5e:22:db:b1:a1:f6:7e:
c8:64:a8:72:77:6e:d9:2e:dd:54:b7:d9:78:4e:50:
a6:8c:29:d9:95:80:f3:4a:0f:75:45:3e:40:fb:13:
96:14:62:12:da:4d:0e:9c:cf:2f:af:7f:1f:5c:3b:
04:3b:34:8f:f7:ab:94:4f:a2:01:87:29:c6:e4:83:
bc:9d:cf:dc:2f:b7:f2:5c:b4:6c:de:d4:cf:7f:dc:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:74:07:88:FD:F9:FC:51:79:60:D0:C6:55:7C:63:BE:56:7D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/728ab875-333b-3a04-bd97-6345b2cce571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:b8:0f:0d:3e:58:fb:fa:07:07:48:f0:2e:74:0a:63:b3:72:
2e:86:77:36:4e:d5:b2:d4:94:b0:cc:fd:2c:76:9b:4f:35:04:
bc:2f:b2:33:dd:cc:e0:76:81:aa:3b:81:9e:47:12:df:1b:92:
24:aa:d4:3d:0c:fb:23:ef:f3:53:b1:5d:c3:3f:a0:5a:4e:0a:
89:45:c3:cd:90:c9:33:20:08:02:ae:7d:c4:2e:05:af:2c:02:
fb:b8:90:2c:46:df:0f:7a:32:ba:ce:35:2b:fb:ce:47:0d:87:
10:51:5b:1d:0a:51:df:5c:fb:37:69:06:46:ed:e3:a5:6c:02:
c6:2c:33:bc:96:46:17:d2:f3:8a:f6:3f:88:d2:ea:58:d9:c2:
bc:d5:27:ed:37:84:37:90:b6:96:5e:98:7d:8a:66:35:fe:37:
4e:03:92:cf:ad:c2:1e:82:9a:61:b1:93:cc:9c:e1:46:87:f1:
2c:8e:a1:68:e3:74:94:90:cc:69:48:99:e3:9f:4e:a4:f0:26:
87:76:68:c9:58:81:e5:e1:a3:f7:40:b7:70:4b:09:f9:b1:1b:
0e:aa:91:0e:14:3a:f8:1e:20:96:b2:86:7d:3f:ff:53:9b:85:
7f:a7:55:99:ba:50:86:e5:c9:c9:9f:2f:38:6f:83:ce:49:c1:
28:4c:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:44 2026 by rpki-client