
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
File: ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa (raw, json)
Hash identifier: mWlIBqmlc20QykSdt4dvmDeXpCengD6hOgsYqmkb61o=
Subject key identifier: CD:95:73:15:2A:01:AE:E8:26:D5:3F:77:A6:0F:E6:B0:8F:53:CB:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0BDD1461DD2DDABFEF0A0B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 396562
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:14:61:dd:2d:da:bf:ef:0a:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=ae8cdec7-8a57-43b0-a112-080595cc77df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:27:88:76:31:ac:cc:42:e4:67:6b:89:df:
28:44:dd:9a:7e:17:c1:65:97:62:89:0b:91:47:99:
d6:96:b0:4d:bd:f8:99:85:a9:70:10:fc:58:93:5b:
b9:77:2d:f1:1a:5d:97:73:10:ef:86:26:30:43:d7:
e4:85:82:f7:50:ae:b8:75:dc:4f:da:8a:46:a7:b4:
eb:10:2d:7c:82:31:4c:6a:e2:5c:1a:fa:68:f2:04:
17:3d:4c:c5:c6:1b:05:04:c3:5e:16:ff:50:38:ed:
25:0c:12:7d:50:99:05:d8:b4:c2:86:60:ca:25:d9:
cb:4b:da:e4:1c:ad:57:65:1b:db:db:f9:a5:e9:7d:
f7:44:5a:63:ca:84:fd:eb:19:64:b2:de:cc:42:18:
b7:99:17:7a:b2:e6:50:a5:55:ae:bd:2e:89:34:d4:
b1:03:65:3d:e8:e8:ce:3a:95:c7:47:ad:0c:13:6c:
2c:e8:ee:f3:ad:17:35:71:8b:d7:69:c8:38:11:6b:
2f:05:35:7f:62:74:d2:94:de:7c:a7:87:59:0c:73:
5a:27:73:43:ee:d6:9a:89:29:ef:31:0b:58:ea:95:
68:1c:70:3d:fa:12:d2:44:75:c0:ed:ca:85:c6:71:
4a:24:0d:d6:2d:2c:80:c1:59:ac:32:4d:71:c1:ec:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:73:15:2A:01:AE:E8:26:D5:3F:77:A6:0F:E6:B0:8F:53:CB:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b1:7d:f2:7a:7b:bc:59:af:98:61:4a:71:77:93:bf:48:a3:
20:d2:c5:eb:84:76:41:15:a0:6c:e5:e3:fc:f3:82:8c:fa:a0:
59:cb:7d:3e:06:ee:f4:09:7d:b1:42:e2:6a:88:23:5e:58:62:
fd:84:12:53:23:d2:52:a5:37:b8:9b:5f:9c:fa:74:ac:38:e8:
b1:32:d9:0e:48:9c:43:c2:54:c5:db:74:7a:46:67:18:1f:84:
7e:85:0e:a4:16:6d:35:34:ea:ce:28:b0:3b:62:c4:7b:42:8c:
ba:2c:96:de:52:84:f9:d8:0f:13:17:39:14:e2:97:e7:c6:0d:
8a:e8:db:a2:44:d7:90:7f:09:41:10:4b:4d:6e:62:93:08:01:
02:4c:8e:01:d0:81:bc:71:dc:f4:11:95:b1:0a:3e:0c:1d:8a:
f8:f5:44:d2:84:68:95:62:0c:ea:29:d4:fa:c1:d4:20:14:52:
d5:12:d3:78:18:6c:5f:cd:ae:d2:b8:bf:4c:8c:89:dd:e3:53:
d8:cb:c2:95:69:fd:1c:a3:dc:79:f1:50:55:2c:5f:57:3e:13:
d5:98:4b:9c:ee:71:f3:14:b8:83:02:bd:4a:5a:6b:da:f7:5b:
90:12:7a:c8:1e:71:90:68:e6:30:fe:95:da:39:1b:10:31:00:
58:3c:7a:2a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RRh3S3av+8KCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
YWU4Y2RlYzctOGE1Ny00M2IwLWExMTItMDgwNTk1Y2M3N2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkUniHYxrMxC5Gdrid8oRN2afhfBZZdiiQuR
R5nWlrBNvfiZhalwEPxYk1u5dy3xGl2XcxDvhiYwQ9fkhYL3UK64ddxP2opGp7Tr
EC18gjFMauJcGvpo8gQXPUzFxhsFBMNeFv9QOO0lDBJ9UJkF2LTChmDKJdnLS9rk
HK1XZRvb2/ml6X33RFpjyoT96xlkst7MQhi3mRd6suZQpVWuvS6JNNSxA2U96OjO
OpXHR60ME2ws6O7zrRc1cYvXacg4EWsvBTV/YnTSlN58p4dZDHNaJ3ND7taaiSnv
MQtY6pVoHHA9+hLSRHXA7cqFxnFKJA3WLSyAwVmsMk1xweyNKwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM2VcxUqAa7oJtU/d6YP5rCPU8vSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWEzOGVmZDMtYzU0ZC0z
OTRlLThkYTktY2VmN2ViYzc3YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCAsX3yenu8Wa+YYUpxd5O/SKMg0sXrhHZBFaBs
5eP884KM+qBZy30+Bu70CX2xQuJqiCNeWGL9hBJTI9JSpTe4m1+c+nSsOOixMtkO
SJxDwlTF23R6RmcYH4R+hQ6kFm01NOrOKLA7YsR7Qoy6LJbeUoT52A8TFzkU4pfn
xg2K6NuiRNeQfwlBEEtNbmKTCAECTI4B0IG8cdz0EZWxCj4MHYr49UTShGiVYgzq
KdT6wdQgFFLVEtN4GGxfza7SuL9MjInd41PYy8KVaf0co9x58VBVLF9XPhPVmEuc
7nHzFLiDAr1KWmva91uQEnrIHnGQaOYw/pXaORsQMQBYPHoq
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:42 2026 by rpki-client