
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3975e4c-d71b-3a13-8c1b-fdbfd670c067.roa
File: b3975e4c-d71b-3a13-8c1b-fdbfd670c067.roa (raw, json)
Hash identifier: iOW9YsnsEJzcsTS9z5phyUb4GBAl9gOuDycvju2hGaY=
Subject key identifier: 3D:77:CB:DA:65:88:4A:78:07:0A:32:E7:95:37:D8:63:77:B8:2D:CF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4986BDFD64DD1D7125EA6E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3975e4c-d71b-3a13-8c1b-fdbfd670c067.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20172
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:bd:fd:64:dd:1d:71:25:ea:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=209fd985-f011-4f4c-85cf-8839026ddaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:ac:41:aa:a3:b2:4f:31:b6:5f:03:27:d9:
b8:0a:aa:da:30:6f:c5:f9:2f:e7:a1:07:89:31:3b:
5b:61:b4:69:e3:ef:a8:ad:92:e9:62:e0:54:be:2e:
e4:1e:10:32:d6:c9:48:06:b0:b2:e4:e1:dd:fc:5b:
d2:cf:f7:fa:44:fd:16:65:21:e8:9c:88:4d:72:db:
b3:6b:b9:59:d5:be:ad:a7:eb:18:0d:8b:8b:03:fd:
b2:c0:75:84:3c:ad:81:5f:a8:ef:7b:8f:26:5d:ea:
fa:e4:54:c9:7d:c2:16:fa:32:52:41:d1:4b:e1:a8:
7c:57:15:bc:a8:b6:08:ee:10:66:b8:a3:58:70:ea:
e3:f9:63:79:7f:a3:65:52:3b:24:df:b5:b5:cf:c9:
a2:4c:65:40:a0:42:8b:56:41:09:84:04:71:2b:11:
67:fb:ec:67:79:8a:8c:18:41:59:35:1c:a4:11:01:
25:54:a2:9c:a5:0e:dc:32:26:71:b1:c7:ed:3b:c0:
ed:00:35:46:7e:bd:d0:99:74:1d:ea:04:80:40:ba:
b8:db:7c:78:f8:fa:36:0a:5d:99:76:3b:30:c9:1f:
4d:4e:4f:7f:0c:33:62:0c:10:c4:71:58:0a:86:70:
34:99:1a:66:22:8e:6c:8f:c0:c0:8d:96:cd:4f:3f:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:CB:DA:65:88:4A:78:07:0A:32:E7:95:37:D8:63:77:B8:2D:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3975e4c-d71b-3a13-8c1b-fdbfd670c067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:21:89:fb:87:98:ca:52:03:ad:20:61:3a:75:bb:91:0a:ed:
d2:87:61:ba:80:af:2d:81:25:c4:bc:1e:01:45:ca:06:22:84:
47:ff:2e:1d:61:de:95:d2:18:c1:14:0d:79:ea:b8:a1:9e:e6:
8d:3e:19:f2:39:aa:d2:34:bd:30:cc:51:cb:fe:76:c7:3c:a4:
f7:38:89:c3:39:e4:2f:b7:79:29:be:90:44:28:3e:ab:35:68:
b7:0b:b4:b1:c5:89:cd:e4:7d:29:84:cc:5f:60:dd:c0:17:94:
58:e9:d1:4e:92:8b:03:c8:da:92:70:84:8b:9f:87:bf:3a:09:
03:92:68:31:9e:41:3d:04:0b:0c:c4:1b:2f:8a:d4:2b:c4:52:
05:a0:c6:97:aa:ec:9c:bb:26:b2:97:77:b5:e8:0e:b5:0a:60:
25:35:11:e7:e5:7e:59:54:17:86:c9:d3:1a:4a:2a:aa:95:0d:
b1:c9:2f:aa:2d:06:ae:40:1c:38:b8:9a:93:64:65:6a:f4:b2:
fe:eb:2d:e9:e5:8d:0c:bc:7d:2d:37:dd:06:78:21:fa:15:c4:
ed:4a:e2:5e:d7:f6:9a:f8:8c:23:02:9c:2e:6c:24:4c:1e:81:
dc:1c:1e:8e:4b:ec:4c:a2:70:e1:fb:78:cb:1a:da:81:35:82:
fa:99:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:00:49 2026 by rpki-client