
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89fa252c-0bd1-3626-938b-c6d94fefcb1c.roa
File: 89fa252c-0bd1-3626-938b-c6d94fefcb1c.roa (raw, json)
Hash identifier: qQz+rpwR9FDHr/CvMZcL1MXOJR6GKy3B0820QaSOZ0s=
Subject key identifier: 21:06:1C:77:50:9A:AD:18:49:FE:33:0E:9E:D5:58:33:8F:13:9C:48
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A84CA9C0F5AAAAAB028D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89fa252c-0bd1-3626-938b-c6d94fefcb1c.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 396540
IP address blocks: 2001:500:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:4c:a9:c0:f5:aa:aa:ab:02:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=6f408a72-c299-4045-bde1-c5a0f3a639bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:65:88:7e:9b:c5:68:e2:e1:09:25:70:5a:
46:b8:d0:c3:d2:bd:db:67:85:a2:7f:73:16:ee:04:
61:21:a1:88:4a:a2:de:60:fe:0b:ca:1e:28:8b:0f:
b6:1b:97:4f:fb:8a:d2:92:3b:f4:4d:27:2c:6b:04:
5a:38:cf:91:b2:46:97:95:42:b7:6f:af:aa:4c:cc:
b4:24:3b:e7:70:d0:2c:02:79:53:2c:78:9a:25:54:
a0:64:8e:c6:eb:72:18:c5:e0:39:bf:45:11:45:d3:
f5:d0:d9:4a:cc:2f:1d:fb:a4:5b:24:af:c5:da:8e:
d5:1c:b4:f5:60:b4:86:99:b3:d0:da:34:b9:a6:bb:
6a:27:7a:98:6c:47:a3:87:e2:31:28:4b:4d:7f:f6:
a4:02:47:05:66:9d:23:1a:e5:8a:04:bc:f2:59:a1:
99:45:94:34:fd:24:b9:77:29:a2:5c:8e:67:df:d3:
b6:96:ed:21:4b:2b:de:10:f3:7c:0c:56:fe:79:95:
9a:f9:ca:6a:2c:45:7a:38:e7:6b:cd:a9:6e:d1:31:
e9:7d:1d:f1:d4:c4:6f:1d:5f:a2:57:12:bb:b7:7f:
8e:89:a3:d0:e0:37:d2:0f:c1:a3:42:d9:9c:71:22:
f2:f2:b0:68:e7:89:55:d4:7c:a5:16:e8:99:55:50:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:1C:77:50:9A:AD:18:49:FE:33:0E:9E:D5:58:33:8F:13:9C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89fa252c-0bd1-3626-938b-c6d94fefcb1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:24:a5:fe:64:5c:2b:b0:31:5a:8f:da:05:de:94:56:f4:16:
21:3c:aa:8c:50:e4:2d:fb:14:44:26:f7:75:a3:b2:9d:58:cd:
ab:50:39:1d:0d:60:a0:99:24:75:28:39:20:a7:cf:08:7c:d6:
34:d7:0b:5c:fa:1b:02:49:69:f0:ae:2c:5f:73:72:09:8f:f5:
07:ef:87:5a:68:ec:f5:f1:63:da:10:2a:36:3e:f3:41:92:f2:
09:33:43:b0:6d:4c:c7:b4:aa:a2:f9:92:e9:62:af:68:08:c6:
ab:00:07:b8:10:5e:e4:90:93:52:c2:ca:33:c0:49:b0:01:6d:
b8:ea:37:83:4e:d3:b9:77:24:b3:f6:cc:54:06:84:9c:d3:1d:
fe:6a:21:a9:31:47:7c:7c:ae:18:4d:f0:06:12:ed:d1:62:b2:
e0:0a:9d:a3:85:f5:7e:33:ff:b2:c1:91:c1:e2:8e:fb:f1:1e:
a4:bd:62:8a:f6:07:35:ae:62:d6:91:33:96:0c:53:ea:57:20:
d4:0d:aa:22:d7:de:f4:fc:e3:02:42:26:85:5a:35:6a:99:e5:
7d:24:ff:18:4b:09:38:37:ea:cf:3a:86:a9:44:4d:8f:64:ef:
62:05:d6:38:00:f5:54:f6:b7:86:bb:f0:ed:09:dd:d2:3a:2c:
d6:03:7a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:00 2026 by rpki-client