
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa
File: 8f3f003b-4130-3d2a-85f3-8a01183d2603.roa (raw, json)
Hash identifier: 3iio3sXk9117oYHkoqG03OgG6Kq/VwlLgJl9gotdF2A=
Subject key identifier: B9:48:86:55:4E:BE:B3:51:15:D7:80:68:62:50:E0:81:8B:82:63:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0ED23EB86724613925A0B620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 396602
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:3e:b8:67:24:61:39:25:a0:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=9dc6659d-5884-47da-9ed6-6474898a5ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a7:2b:80:30:10:29:79:1a:55:25:9e:34:84:
a7:31:9e:d3:17:0e:e6:11:f7:87:07:5f:50:dc:3a:
4c:89:a1:6b:6e:78:d0:82:84:dd:d2:c3:20:fd:69:
c1:ac:b9:ad:b2:a0:9f:d7:e5:f2:36:24:c0:b4:4a:
d0:ba:0b:12:9c:64:21:53:d0:3e:bc:35:ed:a4:4b:
f1:0a:b4:5a:8c:8a:26:8e:f2:c2:e1:4e:a8:d5:37:
26:1b:93:5a:5f:e6:fa:59:1a:d2:c0:8f:fd:38:56:
08:6c:36:3e:fc:b6:cb:b9:7d:b1:11:70:d8:d8:f6:
13:68:07:04:01:9d:6e:6e:f9:19:bc:f2:78:21:1d:
ec:f6:36:3a:a3:44:fb:c7:c5:26:4e:d8:ec:a5:f9:
59:94:7f:af:69:6b:e7:75:5c:4c:bf:6f:ec:58:3f:
09:8b:f2:6e:7f:90:a3:26:f7:ba:d0:fd:23:a3:f9:
6f:92:92:db:22:88:7c:5a:fb:2f:0e:ab:1e:f0:83:
38:62:12:da:12:29:65:bb:97:b8:a7:9e:ad:bf:e0:
da:99:21:2c:df:57:fe:22:21:5e:72:ab:87:85:12:
21:63:05:c3:8a:54:85:cd:46:d0:54:8e:8a:6a:e4:
dd:20:07:f6:3a:c7:fb:b9:1f:95:86:f9:f3:23:c1:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:86:55:4E:BE:B3:51:15:D7:80:68:62:50:E0:81:8B:82:63:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a7:61:36:ce:c1:84:27:b9:57:20:44:30:31:db:bd:44:83:
35:18:8f:5b:f1:81:60:a1:ba:44:2f:59:77:39:ad:93:fa:c9:
d6:29:32:6a:0a:e1:91:0a:a0:96:e5:0c:9a:ba:87:78:e2:78:
3b:cf:9b:7f:2d:4a:23:62:b1:9e:82:4d:36:13:79:07:78:a5:
fe:99:17:6d:d2:41:85:8c:a8:08:9e:ff:69:ef:8a:c1:ca:69:
26:38:b4:f7:b4:ec:ef:8c:ec:7a:94:9b:36:b5:60:0c:53:fd:
0a:75:a3:24:2d:fd:17:f7:a7:ab:52:62:02:a8:95:8e:8b:1a:
9a:99:97:35:5f:7c:b6:79:85:ab:8d:ca:46:c8:8b:95:39:57:
c3:53:46:6a:11:b7:9f:46:ee:92:e7:11:35:a5:9d:26:89:f2:
b2:2a:22:bc:29:1a:58:a9:b6:03:8b:dc:b4:4c:13:68:1e:44:
74:b1:1b:6c:b5:0d:3f:1e:1d:78:23:85:47:1d:ed:cf:23:c3:
c2:16:96:14:8f:fc:a0:c2:08:ba:be:76:07:53:5a:ea:61:f1:
5c:b9:d3:dc:36:30:c0:df:f3:32:8b:c9:6e:e4:3f:45:4c:0f:
67:dc:fc:de:eb:e1:f9:9e:2f:d2:94:ab:14:b3:7b:11:91:36:
5c:74:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:47 2026 by rpki-client