
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d12743ae-447b-3776-876c-26e4c3410576.roa
File: d12743ae-447b-3776-876c-26e4c3410576.roa (raw, json)
Hash identifier: aapzBnzgJgpjV3vYtyl6XyVMB4NT7WWkTgRJK4b0oVI=
Subject key identifier: 6A:43:E2:17:74:59:20:FF:FD:7F:9C:A6:ED:85:52:6D:A8:9E:99:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0C036C33CAF38B90C57C71E8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d12743ae-447b-3776-876c-26e4c3410576.roa
Signing time: Tue 03 Mar 2026 15:18:10 +0000
ROA not before: Tue 03 Mar 2026 15:18:10 +0000
ROA not after: Mon 01 Jun 2026 14:18:10 +0000
asID: 36628
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0c:03:6c:33:ca:f3:8b:90:c5:7c:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 15:18:10 2026 GMT
Not After : Jun 1 14:18:10 2026 GMT
Subject: CN=aeb79d6a-9e68-431e-a504-d87823d3e199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:f5:3b:1b:b6:ab:68:d5:bf:1e:d8:12:b3:
c8:d0:4c:3a:71:30:fb:88:7b:7d:9b:9d:4d:d3:64:
ca:42:fb:0a:42:79:cd:80:f6:d5:82:e5:41:c1:75:
f0:d2:d7:dc:a1:88:1b:60:db:f8:00:f2:22:e6:01:
dc:bf:1f:01:96:41:dc:b7:41:28:2e:7a:b6:6a:dd:
52:14:25:55:43:28:19:ef:d8:94:7e:db:c0:94:04:
71:52:c1:2e:4c:03:7a:78:ee:d7:52:c0:a6:de:12:
6b:47:a0:d7:a9:13:74:f5:61:55:d5:f5:ed:9d:3b:
4f:9d:e9:c3:1b:85:53:b4:d6:32:65:8d:de:6f:29:
00:5b:2d:7f:26:eb:28:c2:a2:2e:11:72:0f:6a:50:
44:3a:62:ba:46:04:95:2a:80:e1:25:5d:91:68:c9:
a7:8a:60:d1:71:d8:11:4c:1f:d9:d3:c4:de:42:60:
be:a3:b4:32:1d:df:33:bf:66:5f:41:09:56:b3:08:
ff:5d:c1:b4:53:2d:c1:df:98:5d:b3:17:58:6c:65:
b9:48:bd:4d:6a:c3:a0:9c:db:e1:8e:d0:3a:b8:76:
58:45:27:07:e5:d6:60:aa:f5:47:5c:c1:55:e2:39:
d5:62:11:7e:51:ea:99:a6:3b:09:fd:4c:6e:32:3b:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:E2:17:74:59:20:FF:FD:7F:9C:A6:ED:85:52:6D:A8:9E:99:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d12743ae-447b-3776-876c-26e4c3410576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:52:f5:5f:e6:e1:b7:f5:47:e6:c7:7c:98:61:bd:dd:c7:23:
0e:47:c1:68:b7:53:fb:25:50:d9:59:02:15:da:4e:00:85:fd:
a0:a9:9d:1b:f7:1c:22:5e:00:fe:04:e2:7d:65:c7:75:2e:9a:
87:b9:f0:00:7c:b2:5a:e6:68:2c:a3:2b:a2:14:35:78:7c:09:
40:86:92:e8:c8:7d:62:4e:09:0d:39:bb:78:39:78:66:8a:16:
03:61:1d:03:9b:3a:ad:82:04:6d:dc:6a:5d:b6:99:7e:dd:c5:
47:5a:9b:55:e5:4a:72:45:8a:b5:ff:19:b6:a2:7b:1c:f6:5a:
6c:f1:83:56:c0:3a:02:9b:16:cf:92:12:57:d7:d1:e1:1b:ef:
8a:6a:14:a3:c2:ca:b4:52:4a:f7:40:ac:37:b8:3d:a1:b3:55:
f8:e9:f7:00:30:7b:fe:67:90:9e:3f:d9:1c:b2:f3:9b:15:21:
12:a9:c1:81:9f:71:c7:22:b0:40:32:8c:a4:d4:a6:6d:70:8b:
5d:7b:e0:3c:88:9c:31:fd:e8:da:1d:6a:6a:15:b3:5c:ec:88:
0c:04:7d:0b:1c:78:a9:43:0f:59:f1:d6:0c:8a:35:f7:5f:40:
43:f1:ef:9f:b5:62:5d:c9:00:b6:79:da:3a:c8:da:7d:f1:f9:
80:e6:ae:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2wzyvOLkMV8cegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk
YWViNzlkNmEtOWU2OC00MzFlLWE1MDQtZDg3ODIzZDNlMTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWT1Oxu2q2jVvx7YErPI0Ew6cTD7iHt9m51N
02TKQvsKQnnNgPbVguVBwXXw0tfcoYgbYNv4APIi5gHcvx8BlkHct0EoLnq2at1S
FCVVQygZ79iUftvAlARxUsEuTAN6eO7XUsCm3hJrR6DXqRN09WFV1fXtnTtPnenD
G4VTtNYyZY3ebykAWy1/JusowqIuEXIPalBEOmK6RgSVKoDhJV2RaMmnimDRcdgR
TB/Z08TeQmC+o7QyHd8zv2ZfQQlWswj/XcG0Uy3B35hdsxdYbGW5SL1NasOgnNvh
jtA6uHZYRScH5dZgqvVHXMFV4jnVYhF+UeqZpjsJ/UxuMjthvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGpD4hd0WSD//X+cpu2FUm2onplOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDEyNzQzYWUtNDQ3Yi0z
Nzc2LTg3NmMtMjZlNGMzNDEwNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHtS9V/m4bf1R+bHfJhhvd3HIw5HwWi3U/slUNlZAhXaTgCF/aCp
nRv3HCJeAP4E4n1lx3Uumoe58AB8slrmaCyjK6IUNXh8CUCGkujIfWJOCQ05u3g5
eGaKFgNhHQObOq2CBG3cal22mX7dxUdam1XlSnJFirX/Gbaiexz2Wmzxg1bAOgKb
Fs+SElfX0eEb74pqFKPCyrRSSvdArDe4PaGzVfjp9wAwe/5nkJ4/2Ryy85sVIRKp
wYGfcccisEAyjKTUpm1wi1174DyInDH96NodamoVs1zsiAwEfQsceKlDD1nx1gyK
NfdfQEPx75+1Yl3JALZ52jrI2n3x+YDmruI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:36 2026 by rpki-client