
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044bfdbb-f13b-3c35-b2e3-92d97113aac3.roa
File: 044bfdbb-f13b-3c35-b2e3-92d97113aac3.roa (raw, json)
Hash identifier: gFs7sED0fYCkHKKVQT4Nuc+Jh+o9zBI+dxEumlMEAPI=
Subject key identifier: BF:FC:8C:97:E5:52:D6:B4:4C:F7:B6:C5:85:E6:50:A0:15:B1:40:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4974312EA467832D5DC88300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044bfdbb-f13b-3c35-b2e3-92d97113aac3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397209
IP address blocks: 2001:500:856e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:31:2e:a4:67:83:2d:5d:c8:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=30448203-eada-415e-be03-4d614494d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:e9:79:85:72:72:14:2e:a7:a9:f1:b2:59:
c9:eb:a6:78:d7:b9:0c:05:0c:ac:cf:50:7c:c6:63:
2b:5b:24:02:e0:87:9f:7b:e8:73:2c:16:07:fb:c7:
09:fb:8e:01:1a:d1:db:a2:8d:f4:90:05:d1:e4:b9:
18:f0:e6:0e:36:ef:e2:f4:1c:fd:7f:db:fe:2d:4e:
55:9f:88:ea:d9:d1:2d:88:44:20:ef:50:6f:ec:f1:
c2:5c:15:5d:9d:ba:26:3a:ba:9b:f2:e1:28:79:26:
e5:56:61:67:8c:12:f7:1c:41:3c:94:d2:ec:4c:04:
82:36:a9:64:b4:f0:77:73:d7:29:c3:98:9f:bc:75:
aa:00:b4:b8:de:9f:f0:a7:be:3d:26:f0:13:6e:8d:
68:8c:2f:7b:cc:62:d9:90:54:fc:fa:83:22:55:7d:
29:c4:e9:be:11:6f:79:f8:ed:a2:c3:a6:64:3b:fd:
1f:c9:d0:e1:02:8f:cb:63:2a:63:71:92:8c:16:fb:
26:3b:7d:85:c0:9d:b9:1f:db:df:95:4e:64:5c:fd:
2b:5d:17:e1:a8:65:f4:15:b0:81:25:a8:f6:db:07:
3f:09:e2:1a:a8:d6:22:93:f7:02:3d:e4:e6:3f:de:
e2:05:63:95:06:f2:da:ea:ba:1c:7c:47:28:bb:8d:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:8C:97:E5:52:D6:B4:4C:F7:B6:C5:85:E6:50:A0:15:B1:40:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044bfdbb-f13b-3c35-b2e3-92d97113aac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:77:d4:1d:45:43:ec:11:77:d6:69:d3:74:9e:c9:26:bb:04:
6d:f1:61:1e:c5:14:44:80:7d:b3:e1:22:f9:b6:6a:37:2a:6f:
c5:7f:09:45:1a:bd:b9:56:b4:e1:97:1d:07:c9:af:82:27:f6:
e5:f3:0e:2d:d9:c5:f9:c5:72:5b:10:d8:03:75:5b:c4:55:9e:
3b:6f:fd:77:3a:cd:fb:09:bc:db:54:49:02:80:34:d4:7a:5c:
aa:c0:8a:7b:a5:c5:1e:25:10:37:a2:f0:d7:bb:ab:70:fc:49:
7b:71:61:bf:2a:6d:be:38:91:93:f0:a7:dd:48:e4:33:9e:ab:
91:50:7b:b2:c8:eb:42:d2:30:96:d8:dd:1c:f7:23:57:9b:7a:
82:57:a1:e2:31:77:cc:95:9d:22:90:f7:c1:fb:95:6c:8f:7a:
7b:23:30:fa:fa:05:1b:84:97:fa:ec:6d:82:7f:c9:98:f2:77:
fa:8a:1b:6f:5e:da:52:a7:9e:a6:85:a8:40:88:79:2c:b7:5b:
e9:92:6b:cb:a8:6a:5f:2c:99:00:4c:22:48:5b:81:fd:4f:59:
8c:57:ab:a3:e4:8f:a6:a3:bf:ef:52:21:43:68:f0:33:c4:d6:
ff:1d:c0:6c:4b:63:18:f5:94:d8:07:c0:40:1b:28:7d:47:6e:
73:ce:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:19 2026 by rpki-client