
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3c1285d-4240-3e12-aa87-37faa326fab6.roa
File: d3c1285d-4240-3e12-aa87-37faa326fab6.roa (raw, json)
Hash identifier: sbRqrqeAbL6BkuemPzeaWLyoPg44EvuB21ErkL7LwXU=
Subject key identifier: 5F:8F:5E:83:DF:00:FB:58:C5:5F:6C:27:7C:D2:03:7C:5A:02:2B:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1F759FFDF447BBF9221E6742
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3c1285d-4240-3e12-aa87-37faa326fab6.roa
Signing time: Tue 10 Mar 2026 14:28:38 +0000
ROA not before: Tue 10 Mar 2026 14:28:38 +0000
ROA not after: Mon 08 Jun 2026 14:28:38 +0000
asID: 396549
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:75:9f:fd:f4:47:bb:f9:22:1e:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 14:28:38 2026 GMT
Not After : Jun 8 14:28:38 2026 GMT
Subject: CN=c82c53ec-09c9-4231-8de1-ff1be5490121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:b1:fe:64:e8:8f:63:9c:da:08:41:1d:01:
ca:e3:16:64:24:5a:73:cc:5a:f1:5a:5e:47:d8:53:
62:fa:4e:d0:c6:b6:b6:c4:57:b1:c1:56:94:ec:bc:
ec:d4:33:ec:b9:3a:09:fa:4b:3b:df:97:9a:35:42:
9c:dc:f5:b7:ca:6e:dc:50:70:d6:a7:fd:26:15:01:
96:77:5a:97:74:61:fc:e4:a5:75:57:0e:f3:89:ac:
96:31:15:75:9e:c4:ae:37:a4:39:7e:95:14:1a:b3:
cc:7d:52:a3:aa:30:86:a9:21:89:ee:7f:cf:df:72:
ab:e2:39:b9:e1:f5:ab:05:d3:79:af:97:21:21:e0:
d4:b5:da:6e:b5:a5:5d:b9:95:ec:06:68:d9:2d:6a:
d0:71:0a:89:f4:b2:7a:89:30:8f:32:22:3a:6b:d7:
3e:11:73:14:bc:eb:d8:70:b0:29:51:d5:09:a3:52:
53:9d:8e:15:70:ff:f7:5a:49:5d:3f:c0:d3:0b:1b:
b4:56:77:10:c0:13:db:c5:37:b2:55:e8:b6:fa:ec:
98:88:c6:3a:df:e0:76:66:c2:93:1a:d5:cf:9a:df:
46:e4:63:4a:5a:b8:25:57:6e:cc:88:af:cc:f5:99:
34:cf:11:d3:c6:ea:5b:7c:87:ea:d7:e8:bf:ed:dd:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:5E:83:DF:00:FB:58:C5:5F:6C:27:7C:D2:03:7C:5A:02:2B:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3c1285d-4240-3e12-aa87-37faa326fab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:e3:3d:fe:c4:a3:57:c1:ee:72:23:10:ba:22:9f:2b:a1:7f:
42:ac:52:fa:6e:09:2e:ed:1e:b0:dc:2f:76:2a:75:d8:d1:a2:
42:c4:a1:da:be:74:4c:5c:09:5b:85:b1:87:6d:58:ee:9f:0a:
13:c1:8e:84:4c:36:e9:96:d0:99:9a:6b:d7:f9:8a:99:17:8f:
1e:35:40:2f:2e:8f:0e:51:af:00:62:30:7e:88:9d:93:ac:31:
0a:69:07:84:2c:b6:3a:21:30:5a:3e:55:fd:13:82:1a:2f:5a:
b5:e1:03:d1:48:db:1b:6d:1f:47:5b:5d:97:1b:cf:02:55:d6:
10:ae:5d:a5:4e:d4:35:e1:f3:2c:e0:66:52:07:96:f2:e6:7b:
30:6b:71:d0:26:43:09:b4:43:ea:9f:c0:f4:87:6b:79:d0:ca:
f8:13:ce:a6:2d:2a:28:85:bd:3f:9f:c9:b8:a4:bc:ed:45:24:
dc:b5:20:8b:55:7a:73:ed:f9:48:96:4c:01:c2:dd:32:b9:d8:
5b:44:f4:9a:fd:d8:17:0c:d6:f5:3e:ba:9a:ce:00:86:bb:32:
c9:21:16:83:cb:18:dd:fb:c8:e8:02:eb:2b:30:db:59:1a:04:
0c:5b:93:dd:d4:85:8a:3d:84:21:56:46:a4:15:5d:76:b9:b7:
ec:7d:97:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:24 2026 by rpki-client