
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff97400c-6fc3-370b-be13-5f61f3cbabee.roa
File: ff97400c-6fc3-370b-be13-5f61f3cbabee.roa (raw, json)
Hash identifier: BIcEUmHWvDqRj4z/P2PpTw9HRCCz4zeSOX9L+doytg0=
Subject key identifier: 17:3A:F7:3F:3E:C7:F2:49:B5:E4:D4:98:56:42:BC:C4:C2:F8:B3:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D422F8D209450B666DA86A310
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff97400c-6fc3-370b-be13-5f61f3cbabee.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 36620
IP address blocks: 2001:502:cbe4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:8d:20:94:50:b6:66:da:86:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=07650aee-662d-4b89-b1c5-c109780d960e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:17:2a:86:95:59:fe:82:76:53:02:a7:99:
0b:cb:2a:b7:57:f6:70:5a:db:be:b6:ed:b7:7f:40:
06:bb:c8:65:0d:da:e8:ee:d6:8e:7f:14:44:5e:bb:
d1:f3:e0:84:d9:c5:a9:b7:04:f2:9e:c3:11:b2:b7:
95:c9:93:6e:a4:bf:b8:d6:e2:03:0e:1e:91:cb:80:
8e:84:82:7a:3d:22:84:d0:fc:4b:f1:7f:eb:e0:de:
fb:2d:96:df:ad:ee:aa:2b:ad:b2:cc:c6:f9:07:4d:
c8:51:e7:1d:f8:05:2b:55:4f:47:af:bc:6e:7c:ad:
56:61:5c:be:2e:25:95:5a:ae:50:1e:85:12:9c:97:
7e:01:ba:1c:0d:b3:08:14:dc:a2:de:bd:94:33:e6:
9a:56:07:d9:93:64:c5:4f:6f:19:1e:6f:e9:70:22:
b7:0d:72:be:ed:1f:8a:05:af:1a:27:1c:42:a4:aa:
2e:4a:72:7b:36:6d:c0:0a:18:28:ff:bf:cf:36:3b:
57:06:39:de:07:d9:69:47:63:a5:15:32:88:2b:7b:
9a:79:c7:74:c4:38:77:c5:c7:42:9a:03:6c:e1:0a:
91:08:15:d2:a8:c8:e8:d9:a7:8b:cd:cf:1b:2d:38:
5a:d9:bd:a3:df:b2:e1:44:4c:c0:29:62:36:0c:46:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:F7:3F:3E:C7:F2:49:B5:E4:D4:98:56:42:BC:C4:C2:F8:B3:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff97400c-6fc3-370b-be13-5f61f3cbabee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e1:10:3e:65:42:8f:00:1a:06:13:24:6d:32:3b:a4:24:f7:
3b:29:51:b5:1d:b0:32:aa:1d:4d:67:62:b6:7b:10:8d:24:09:
7b:a8:16:0c:b7:e9:3a:77:c9:34:f9:a2:06:4f:c4:3a:f9:4f:
67:6e:a9:70:fa:22:c3:9e:9a:81:07:03:e0:13:02:06:b2:85:
d3:16:4a:dd:73:a0:8b:63:3d:d5:c8:95:56:b2:2a:34:8a:0f:
c9:72:c3:4b:f6:08:d0:16:b2:f8:b2:39:e7:21:5c:b1:96:ae:
88:f2:c7:ac:c8:6f:a9:c4:75:df:68:e2:81:2f:a0:c3:3c:0c:
0e:5f:1d:54:e9:50:63:eb:58:d4:59:5a:40:a3:81:28:8e:2c:
d5:06:70:28:6e:6e:c9:f7:36:40:1b:09:e1:a3:4e:06:d3:62:
2d:d0:2c:ad:88:7b:20:07:8c:70:36:fa:e4:da:9a:9e:3a:f2:
6f:a9:0f:53:76:f7:7c:d1:bb:fe:ca:42:aa:db:93:dd:12:95:
de:29:a4:f3:53:eb:3e:43:d9:77:ca:ad:0d:a7:32:3e:97:19:
9f:ec:06:e1:f6:4f:2c:1e:d9:b0:24:61:66:ed:b4:3e:89:f0:
c2:29:b3:93:d4:0f:9a:a5:4f:c3:80:7a:21:4f:29:64:64:89:
82:fb:89:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL40glFC2ZtqGoxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
MDc2NTBhZWUtNjYyZC00Yjg5LWIxYzUtYzEwOTc4MGQ5NjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQkXKoaVWf6CdlMCp5kLyyq3V/ZwWtu+tu23
f0AGu8hlDdro7taOfxREXrvR8+CE2cWptwTynsMRsreVyZNupL+41uIDDh6Ry4CO
hIJ6PSKE0PxL8X/r4N77LZbfre6qK62yzMb5B03IUecd+AUrVU9Hr7xufK1WYVy+
LiWVWq5QHoUSnJd+AbocDbMIFNyi3r2UM+aaVgfZk2TFT28ZHm/pcCK3DXK+7R+K
Ba8aJxxCpKouSnJ7Nm3AChgo/7/PNjtXBjneB9lpR2OlFTKIK3uaecd0xDh3xcdC
mgNs4QqRCBXSqMjo2aeLzc8bLTha2b2j37LhREzAKWI2DEbShwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBc69z8+x/JJteTUmFZCvMTC+LMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY5NzQwMGMtNmZjMy0z
NzBiLWJlMTMtNWY2MWYzY2JhYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB7hED5lQo8AGgYTJG0yO6Qk9zspUbUdsDKqHU1nYrZ7EI0kCXuo
Fgy36Tp3yTT5ogZPxDr5T2duqXD6IsOemoEHA+ATAgayhdMWSt1zoItjPdXIlVay
KjSKD8lyw0v2CNAWsviyOechXLGWrojyx6zIb6nEdd9o4oEvoMM8DA5fHVTpUGPr
WNRZWkCjgSiOLNUGcChubsn3NkAbCeGjTgbTYi3QLK2IeyAHjHA2+uTamp468m+p
D1N293zRu/7KQqrbk90Sld4ppPNT6z5D2XfKrQ2nMj6XGZ/sBuH2Tywe2bAkYWbt
tD6J8MIps5PUD5qlT8OAeiFPKWRkiYL7iS0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:20 2026 by rpki-client