
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
File: f25e9c1d-5728-31af-8972-a301f57f3e78.roa (raw, json)
Hash identifier: fe3C75APSE9j9IgOMR4T04GWQAFiPTLy4APx/3Kug+Q=
Subject key identifier: 87:E0:EE:06:CC:18:F8:AF:46:19:6E:14:F9:54:D9:11:53:D5:72:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0BDD13FBED0D90F91DF890A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 396586
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:13:fb:ed:0d:90:f9:1d:f8:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=866658cf-2ac9-4bbe-b828-d0d5c64d297c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:e1:ba:b1:6d:4c:fe:10:e6:01:5d:b9:2b:
e2:b1:b5:e4:f5:c0:b6:61:07:da:16:18:b8:24:ac:
8a:dc:9e:f0:8d:4d:22:e0:30:5b:a7:e4:72:0d:f0:
80:ba:67:57:77:1c:46:c8:f8:6a:63:8a:3e:6b:07:
f6:68:a9:b6:5c:f6:b1:fc:b6:fd:b7:7a:19:a5:d9:
55:15:39:fc:34:45:ed:24:05:93:45:8e:0a:22:9f:
87:f2:9a:91:2f:1b:ae:ff:5c:e1:03:04:68:99:49:
33:9a:ae:75:c0:64:1d:c5:60:89:57:19:0e:14:ce:
ff:84:60:50:48:76:c3:fa:95:c6:70:fc:64:b7:ef:
93:06:53:e3:5b:95:1f:a3:c6:96:26:6f:cb:ed:b8:
e2:ee:fd:ce:d9:bc:60:31:70:e6:a1:7c:c3:67:35:
ad:e4:7a:7d:e4:24:3a:e5:3d:f6:18:9f:56:aa:68:
1f:80:9c:31:5c:9a:bc:24:8c:b8:65:d9:fe:14:0e:
3c:a7:fe:86:7e:c2:2b:93:94:78:3d:2d:ea:b4:c0:
f4:c8:4d:d0:79:91:b9:11:4f:e8:9a:66:1f:32:49:
95:23:9d:0d:e9:a6:e7:5c:b5:a8:c1:1c:e1:93:15:
2e:e4:a2:3e:14:db:d6:6d:c9:8d:1b:a3:2a:34:c3:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:EE:06:CC:18:F8:AF:46:19:6E:14:F9:54:D9:11:53:D5:72:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:13:20:18:6b:35:40:ca:a6:79:06:f0:ce:15:b6:30:2b:8e:
86:04:b1:25:f9:ac:9d:32:c7:24:a7:5a:8c:2b:04:8b:ad:26:
0b:b5:c8:2f:ec:b0:88:6f:94:da:5e:6d:da:09:8b:4e:55:30:
ec:18:33:80:2b:94:d1:75:a3:fc:e1:51:85:a9:88:a5:24:99:
2a:5f:80:10:d7:5e:8f:ca:06:24:6e:88:38:40:9f:88:c4:4c:
f4:da:54:90:05:d5:f7:55:1d:65:9a:c5:a3:15:50:81:e6:b6:
40:c4:73:74:ae:5c:27:3f:d6:aa:57:56:8f:bf:db:48:b9:da:
56:5e:fe:a9:84:7a:a4:31:28:1a:10:22:fe:64:74:85:03:b8:
74:6e:19:4f:62:0d:00:a3:e5:8c:91:52:cc:7d:cc:3a:8c:09:
b9:22:13:9c:7c:20:6d:31:ba:0c:cb:1a:de:f4:e4:10:e9:a0:
33:d7:3b:89:be:35:8e:7e:f8:99:b3:97:e9:3d:44:0f:12:2d:
d5:0e:d9:cd:15:6f:39:08:5e:9e:08:f3:f2:2b:4d:e5:fa:a9:
87:6c:25:4e:f3:54:cc:bf:de:77:d0:df:30:38:92:62:ea:80:
d8:51:79:96:49:c0:1e:13:1b:ad:9a:c3:36:32:67:8a:d2:d2:
3b:6c:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:21 2026 by rpki-client