
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b996a6a1-3f51-35ab-9375-d639def3a892.roa
File: b996a6a1-3f51-35ab-9375-d639def3a892.roa (raw, json)
Hash identifier: CHvO4mqUXjjVZH4Q0/g6PYH+CIRK8QU4GeIy1hk65E4=
Subject key identifier: 2A:47:52:69:71:14:A0:C3:3D:A5:FD:33:93:AD:14:DB:C2:6B:B7:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E66DA2B8BE50543848FDEF780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b996a6a1-3f51-35ab-9375-d639def3a892.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 397199
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:2b:8b:e5:05:43:84:8f:de:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=e32ee1e8-bf83-4e3f-b215-b4926474822f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:96:c4:80:d0:8d:4e:0a:65:01:b6:ef:5d:
58:ed:ae:d4:64:22:dc:ed:15:7f:5d:dd:3c:d7:b4:
5b:6f:a9:5c:f4:de:a6:40:61:a8:a4:d8:04:92:5e:
9a:14:6b:4d:dc:89:6f:34:d9:f4:ba:11:7f:a7:1c:
88:67:73:41:94:fc:29:6f:12:cc:46:c5:e5:b7:5a:
70:2c:64:ce:a5:71:72:50:63:42:62:32:56:9f:cb:
1d:e0:24:86:a7:ae:0a:41:86:f0:73:6d:19:e2:c0:
cc:04:9b:9c:ed:d9:bc:6e:a0:ac:d1:32:ce:ca:b8:
d8:d9:cd:35:3e:d5:91:87:68:27:26:a0:5f:57:25:
18:d6:12:0c:8c:8a:af:23:cc:fc:bd:75:be:45:e8:
1e:f9:b3:3d:12:f5:2a:2c:2a:c4:89:9f:a7:e2:22:
dc:82:80:4c:5f:f5:ee:d5:2a:c0:3b:dd:72:55:ad:
a6:3d:ad:a9:aa:c4:89:e6:00:b4:f2:5c:5c:84:f3:
d1:ff:43:30:40:eb:f8:b3:be:0b:1c:6b:be:b7:cb:
33:2a:90:13:e4:91:7d:25:8f:28:51:02:c7:b6:11:
98:42:01:bc:fb:1c:fe:79:6d:bc:cb:2b:5a:dd:e4:
3c:80:ac:bb:80:50:ce:f9:a4:e3:fd:76:14:40:6f:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:52:69:71:14:A0:C3:3D:A5:FD:33:93:AD:14:DB:C2:6B:B7:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b996a6a1-3f51-35ab-9375-d639def3a892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:28:3b:8a:50:10:01:1b:43:af:9c:e7:7b:71:0a:21:d1:f2:
ff:8c:c4:62:0f:6e:08:38:f4:af:68:d9:4e:e4:0b:41:44:57:
25:9f:90:99:c9:f1:fd:e2:dd:35:7e:90:10:08:5e:56:06:69:
88:94:68:ff:0d:b5:82:c7:f2:ae:c1:9f:e5:17:ab:77:1c:d6:
af:3e:11:f6:80:05:e0:80:58:a3:c6:9b:00:4b:fb:0d:1f:97:
09:6e:85:f8:cb:d3:32:b9:10:a2:00:73:6c:8e:13:89:a8:56:
df:5b:a0:b4:fd:4c:30:99:00:26:c2:51:18:58:5c:6b:2a:eb:
cb:09:5e:ac:c2:ea:ff:0a:93:22:97:2e:34:8d:f8:28:a8:fe:
89:3b:62:19:5b:37:37:5c:5f:29:98:c2:dc:11:62:c2:06:03:
4a:25:16:50:99:a2:88:f9:9f:c5:c0:79:44:c9:3c:65:d9:b4:
3b:4e:68:c3:76:50:78:c9:ff:5e:e9:73:1f:a4:45:2d:c1:8f:
ea:de:d9:59:6c:be:79:62:02:7c:cf:dd:ea:ac:5c:0b:a4:ae:
08:44:48:b5:77:19:a5:6b:dd:9f:07:b6:00:7f:94:4d:75:be:
c0:7b:b9:c3:bf:d6:73:51:7a:f3:7c:0c:38:16:86:e0:13:67:
89:bd:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:29 2026 by rpki-client