
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4649b37-d746-306f-b3d3-4f94b307e5f9.roa
File: f4649b37-d746-306f-b3d3-4f94b307e5f9.roa (raw, json)
Hash identifier: OLJ2xbCRjqVgxKeB7RUQx2G14VmEwkbd/cjSAfEnHwQ=
Subject key identifier: 71:FC:3C:25:D2:8F:F3:E4:51:73:E8:D6:17:6F:16:30:8D:7B:F0:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49878806AF9D35FEB7282B10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4649b37-d746-306f-b3d3-4f94b307e5f9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 25485
IP address blocks: 2001:500:134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:88:06:af:9d:35:fe:b7:28:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cfafd2a0-5b15-49f9-bc6a-2c9b4de66e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:2a:05:77:2e:aa:38:ac:c4:5e:85:ba:57:
e0:07:8c:bb:e5:04:e2:d7:12:ee:9f:f8:5e:9b:58:
3a:da:ac:e5:c0:0e:e9:87:d4:ee:e5:c4:2f:8a:71:
8b:02:1d:d1:51:f2:cd:5e:a4:17:75:f8:ac:bd:36:
78:25:01:86:94:9a:10:c1:e7:b9:aa:70:cf:f8:c7:
99:f5:1a:71:42:5f:25:e5:ea:20:6e:07:d5:6d:2d:
67:c8:73:de:29:07:84:d6:13:c0:60:d3:84:46:0b:
7e:c5:50:5b:96:1c:1a:be:41:87:72:be:66:a2:2e:
4d:b0:96:9c:ec:61:fa:11:1b:91:b3:34:d4:f6:19:
32:22:02:fc:70:8d:e2:11:fe:f2:7f:e3:c6:c3:15:
ae:2d:a1:06:28:f9:78:84:9e:42:ae:77:42:bd:50:
a3:f0:b7:f6:e5:a7:54:37:ed:64:88:a1:8d:81:5b:
f9:02:e8:d7:80:a0:60:98:26:e9:c1:66:21:8d:f7:
14:33:d2:6a:7d:a8:56:6f:37:f5:29:83:7e:8b:a5:
66:c8:0f:1c:bb:ed:f6:7e:76:5a:6e:da:e5:14:48:
d2:9a:bb:ea:da:c7:0b:df:8d:e7:c6:c0:13:d1:82:
cf:a0:50:25:8c:8f:c5:89:7e:bc:a6:d4:53:8d:6a:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:3C:25:D2:8F:F3:E4:51:73:E8:D6:17:6F:16:30:8D:7B:F0:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4649b37-d746-306f-b3d3-4f94b307e5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:3c:20:42:24:8a:42:92:d2:4a:34:59:55:72:37:64:26:ae:
91:43:64:6f:e1:88:d5:c7:0d:fd:d0:ee:dd:a6:6f:dd:d9:8d:
f3:1f:33:bc:3d:b3:e4:7e:7b:ab:a1:fc:c5:d9:0a:97:97:af:
cf:d7:b7:27:17:af:e3:1a:23:97:39:ac:ae:14:96:20:58:fd:
78:ff:c4:15:eb:f8:27:72:34:6b:d6:2d:f9:c2:7c:d2:2c:7f:
da:9a:9f:ba:f8:a9:92:50:78:c8:74:7a:3e:e7:af:a1:2c:9b:
1d:f1:78:d5:53:25:f3:fb:3d:bd:e4:d9:41:07:4c:18:05:48:
a2:7b:c5:a3:55:59:2b:df:3e:f0:50:ec:df:d7:f2:99:6f:cf:
14:23:a7:bc:02:d5:7e:70:99:c8:ba:81:e8:4b:20:f2:66:8f:
26:9c:0d:7a:58:1e:c3:63:67:86:cc:1e:f4:00:8b:e4:1a:00:
78:cb:0b:63:98:ff:c6:77:b4:47:7d:07:a0:e4:4b:e6:5b:31:
ea:d5:60:1d:f9:aa:1c:dc:c1:82:25:b7:30:1c:b9:d2:1c:b0:
1f:b0:aa:3b:6a:6f:a1:aa:d6:f9:3c:b2:8f:a6:27:21:8f:9c:
bf:6c:de:21:4f:38:e0:48:6b:46:35:40:5f:a1:11:34:14:ad:
1b:bf:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:18:55 2026 by rpki-client