
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024ccf7b-da19-38df-bb3d-799815f4aebc.roa
File: 024ccf7b-da19-38df-bb3d-799815f4aebc.roa (raw, json)
Hash identifier: VfGlSsOhkOx6JDlt78vmL3Cjg9IUbIaNasFalRKd1xc=
Subject key identifier: 28:83:69:FC:BE:8B:64:64:8E:C0:AA:96:B6:40:AC:4F:EF:B0:6D:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A84A630110A796A628F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024ccf7b-da19-38df-bb3d-799815f4aebc.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 36631
IP address blocks: 2001:500:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:4a:63:01:10:a7:96:a6:28:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=2f3721dd-fbb0-4b68-b9a2-608aa2561bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:44:f3:62:2a:47:62:99:4b:af:b9:ec:55:
35:9d:44:5e:ef:db:93:7b:16:e0:98:a9:8e:a2:2c:
3e:ae:91:e9:5c:56:ea:e0:e8:96:d2:2d:e7:71:98:
30:5c:b1:29:bf:e6:1c:54:13:6a:e4:d4:b6:d4:d8:
90:ad:4f:6b:25:44:09:f6:11:86:de:51:be:57:e2:
15:2b:27:cc:0b:12:3e:6c:1e:69:52:fc:9e:26:f7:
82:ff:01:d1:80:a8:58:24:aa:a6:c3:48:c6:15:f5:
78:98:3f:0c:47:eb:a7:62:cb:52:a0:b8:92:76:ea:
49:da:e9:b3:94:c3:70:ea:ce:c2:d3:5e:1f:c1:f2:
67:ce:c7:38:9d:23:27:b4:34:7c:22:4e:7f:bc:42:
56:34:47:49:ec:2a:b2:a1:9d:bc:2a:c2:09:42:a7:
a0:75:0f:1e:91:8e:d8:3c:cc:37:1c:a1:21:81:ef:
2b:0b:a5:00:78:e2:3e:37:50:a8:8f:db:96:96:18:
26:ac:eb:df:4d:af:9a:04:14:f4:42:25:cb:be:1b:
eb:a5:09:19:ce:7c:85:b9:ee:80:a5:9c:b6:f5:94:
d9:0c:ac:65:35:b7:ba:41:97:f4:3b:7f:b4:c9:a7:
3b:90:81:8c:e7:75:4c:02:e3:d3:ee:f2:9f:17:79:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:69:FC:BE:8B:64:64:8E:C0:AA:96:B6:40:AC:4F:EF:B0:6D:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024ccf7b-da19-38df-bb3d-799815f4aebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3f:8c:48:c3:f3:13:e1:01:a0:95:1d:25:04:7f:cb:f4:75:
3e:44:11:c0:63:b8:59:af:b5:85:94:9b:72:c7:f0:c2:39:03:
53:cc:f5:8a:96:37:6b:1d:98:1c:b3:9b:99:69:24:0d:b8:64:
4b:ba:8d:68:7e:34:39:d4:ef:be:4e:a5:97:04:d1:cd:bf:9c:
c4:60:3a:d4:1f:29:7e:79:f9:31:28:4c:b6:81:30:bf:a7:52:
cc:36:6f:6a:65:cf:c6:44:cf:9b:42:c0:fa:06:4c:de:c0:f5:
98:b0:47:31:f6:d3:aa:f5:8b:0a:1d:c2:68:22:db:fb:50:72:
51:c8:dc:ac:a7:35:d7:33:70:89:f4:a4:e1:66:37:db:b4:2d:
8b:96:b9:52:36:b7:0f:c7:22:54:c2:c0:5e:8c:6d:2a:b3:20:
cb:ab:d9:52:f7:02:7c:1e:fb:bb:49:07:80:6e:d8:a8:52:83:
36:b7:25:5f:09:10:7f:d1:19:39:67:ac:c7:15:78:6b:9e:04:
2f:ed:1a:45:d4:93:2c:a7:f3:8d:be:12:a2:93:0f:38:34:c4:
6a:82:74:e8:67:26:53:ad:c1:5d:79:40:44:7d:0c:91:73:ab:
24:ba:82:ef:19:28:83:a1:20:39:06:08:c9:6c:2a:63:e6:7c:
41:68:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:36:22 2026 by rpki-client