
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1629ebcc-c5dc-3517-b988-7bfdc3ffbcd3.roa
File: 1629ebcc-c5dc-3517-b988-7bfdc3ffbcd3.roa (raw, json)
Hash identifier: sbbo01JlRchHaae80spEMVBb7GfNFgVMQRC7VFov9gU=
Subject key identifier: 7F:C1:15:67:B6:66:7F:08:CF:96:F1:1C:76:4A:77:F9:3B:D6:DF:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF01CE4E60643DA7BBA332200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1629ebcc-c5dc-3517-b988-7bfdc3ffbcd3.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 396584
IP address blocks: 2001:500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:e4:e6:06:43:da:7b:ba:33:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=87df7d6a-54b0-46e2-b145-896f50ba06fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:7a:d4:2b:3c:2c:69:cd:24:34:bb:22:9c:
cf:ce:a6:3e:e9:2f:3b:38:ea:94:95:4f:05:5f:3b:
5b:1c:d4:c5:bf:a0:04:2b:33:d9:75:6f:55:71:91:
64:f8:c2:a1:08:47:0c:f5:3e:15:11:ca:eb:92:e2:
bf:03:4b:cc:41:4f:b2:09:86:c9:da:cb:76:43:69:
35:ad:5e:9d:70:89:fd:ac:98:89:1b:3f:a6:ad:cc:
22:ea:66:76:00:24:c6:ec:8b:bb:46:df:38:69:f6:
70:6b:ab:4e:68:72:24:bc:02:a9:5a:52:49:a1:f5:
c6:2f:4b:1d:f3:30:92:cd:83:b5:cd:ac:25:c7:25:
ee:59:41:4b:80:94:6d:20:b8:10:1b:13:d0:fa:64:
d2:be:53:1d:b3:07:d2:de:2a:ae:8f:92:98:5d:98:
7b:e1:34:d1:33:8e:f1:ec:28:f8:25:12:a5:0b:63:
93:36:8a:16:0f:2b:72:4e:b3:f3:e3:d1:f1:4a:7f:
3e:87:bc:13:9e:73:df:18:c2:33:70:bf:25:ed:b3:
99:83:a1:de:c1:c8:09:37:be:50:a9:73:7d:c0:62:
2e:d3:a9:75:83:85:7c:48:74:ca:91:61:94:2f:fc:
fc:fe:82:4a:d5:13:5f:cc:ca:f4:20:b0:b0:cb:61:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C1:15:67:B6:66:7F:08:CF:96:F1:1C:76:4A:77:F9:3B:D6:DF:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1629ebcc-c5dc-3517-b988-7bfdc3ffbcd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e2:31:5e:b8:b4:3a:a2:8f:17:81:b3:ac:d6:f5:92:da:6f:
d7:b0:8e:b0:c1:7f:86:d9:a1:8e:f3:3b:a6:3e:04:55:43:e4:
71:1a:11:de:b3:aa:99:c9:66:29:85:52:02:dd:11:27:47:06:
da:df:ec:d2:a8:57:b5:f0:47:01:39:a1:78:9a:68:2f:89:69:
20:13:37:22:dc:85:7c:78:bc:26:1a:1f:89:b9:58:c2:06:55:
5f:8a:5f:56:03:94:93:0d:20:2d:3d:fe:32:a5:58:33:dc:f1:
9b:f3:d0:0d:b2:a1:09:45:af:ce:5a:a8:3f:6d:82:9b:10:68:
58:b1:8c:3f:89:e9:5e:24:70:47:f6:d1:84:41:6f:c4:ad:f4:
8f:6e:d8:29:85:1f:8d:80:3a:b7:88:8b:90:eb:15:ab:65:5e:
ae:3c:e3:2f:b2:17:a8:3f:c1:ab:7a:e9:52:47:73:a6:95:d9:
e1:66:cd:07:22:d1:60:2a:8b:09:f1:5e:49:14:a6:56:df:f1:
17:27:d8:39:7c:f0:dc:f6:63:0a:0e:47:07:c3:eb:03:2a:bc:
d1:33:59:9c:26:60:6d:56:a3:79:4b:02:a4:0b:99:54:17:9c:
3a:58:d0:ac:76:f7:19:e1:25:78:e6:f9:02:2b:b8:a8:e5:48:
75:78:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:37:24 2026 by rpki-client