
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f1f1b77-f395-3a21-bfce-f2e5a45b74df.roa
File: 9f1f1b77-f395-3a21-bfce-f2e5a45b74df.roa (raw, json)
Hash identifier: NN4JpjaH2nVhz5W4UU+tWXfzT/tSNCNwbJf4d/w5p60=
Subject key identifier: C9:53:74:A7:4A:D1:65:FA:72:4E:18:F7:E5:55:66:50:E7:CF:DE:99
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFF9CB54C32983E63FD9800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f1f1b77-f395-3a21-bfce-f2e5a45b74df.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 36626
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:9c:b5:4c:32:98:3e:63:fd:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=2211ebb2-1d8d-47f7-8f74-94a11db2651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:e0:3e:0c:c2:44:64:f7:4d:03:4d:1a:da:
37:e7:5a:26:33:28:b3:8a:90:f4:9e:4e:3e:82:c8:
6f:5f:9c:f3:e3:c1:3f:16:fb:06:15:fa:33:eb:0c:
56:9c:3d:68:10:e4:c4:d1:b1:70:9d:04:0e:8d:02:
22:e6:83:11:a7:0a:ae:64:cc:9e:15:19:00:81:c2:
51:39:d7:7c:d1:f7:49:7b:b4:d8:2c:6d:65:3f:6d:
ac:5c:90:cc:2c:16:f2:96:61:ac:c9:23:44:ce:f5:
dd:62:5e:20:b4:c7:7b:8e:df:a9:96:21:aa:61:de:
2f:bf:9c:bc:6d:7e:4d:5f:e4:3a:92:a9:46:12:0c:
3f:f9:c9:b5:2b:40:c5:3e:03:f9:f3:86:df:bd:ee:
33:66:d9:9f:57:b2:08:5d:93:34:3c:0c:ac:4c:d2:
79:0a:13:ac:9c:ab:b2:18:5b:ee:e0:f2:93:74:6d:
2e:dc:47:61:3d:19:33:d2:d5:c5:1e:ca:56:ee:8b:
d2:1e:82:42:04:ed:23:9d:3e:91:5b:00:63:f4:42:
26:d0:77:f0:22:2c:47:e4:4e:e7:d3:b6:05:36:0b:
32:cc:72:8c:f7:d2:c7:9a:41:08:49:f0:a8:6e:66:
49:2c:c4:54:79:f2:22:97:67:59:fd:4f:81:58:e9:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:74:A7:4A:D1:65:FA:72:4E:18:F7:E5:55:66:50:E7:CF:DE:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f1f1b77-f395-3a21-bfce-f2e5a45b74df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:b2:14:8b:bd:7c:9e:d8:56:67:a9:51:4c:9c:5d:5c:80:07:
be:db:24:cb:04:4b:06:3b:7c:36:1f:c5:4d:f6:38:2e:ba:a0:
8f:8b:8e:80:4b:2d:e4:47:28:62:9b:7c:91:cb:0c:16:52:4c:
ee:49:73:68:1b:c7:36:76:75:ab:2d:ef:0a:f9:53:29:15:6b:
01:c4:72:1d:d6:22:8c:04:2a:2e:6a:55:77:b6:99:8a:36:ab:
62:2b:ea:38:b9:06:0f:59:83:cc:0a:94:42:e9:85:63:88:c1:
35:5b:2a:cb:98:76:03:1a:c6:4f:7c:45:1b:a9:af:c2:22:67:
3c:99:02:53:cc:5f:be:9c:02:3a:b9:7b:a5:bf:1f:c1:7c:07:
19:dc:8d:97:a8:60:05:b0:3d:b3:79:85:e1:0a:4d:7a:a8:d4:
ad:e3:0e:b8:2a:90:77:d9:55:e7:5f:ad:cc:80:6e:1c:73:c2:
a7:f8:aa:4b:d8:de:64:a3:aa:71:f0:bc:25:ed:52:d5:29:03:
01:9e:f7:58:8b:c5:fc:64:5b:61:5d:de:36:89:50:c3:35:d5:
87:e4:ba:35:a7:8e:8d:0b:cb:53:4b:d2:9b:85:0c:81:73:f7:
45:49:d0:80:6c:f7:09:b4:04:4b:8b:48:d0:69:07:9f:b5:be:
66:0a:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:54:57 2026 by rpki-client