
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1693f1a3-2a38-33eb-b67a-253cf8240add.roa
File: 1693f1a3-2a38-33eb-b67a-253cf8240add.roa (raw, json)
Hash identifier: TPrs/eXert5V/pbD6YBxOiIVJJpFVyes0FwCPL4u1ZQ=
Subject key identifier: 5A:6E:3F:B4:CF:6B:1C:66:BB:23:3A:7C:D2:28:A4:89:8B:AF:E2:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA793E6F7E43A4D11473A7080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1693f1a3-2a38-33eb-b67a-253cf8240add.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396614
IP address blocks: 2001:500:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:e6:f7:e4:3a:4d:11:47:3a:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fc55f4ab-6cf6-4db6-8668-b0bf7f1a0de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:f2:96:da:99:10:23:9a:7d:bf:ca:a5:f9:
74:d0:3f:70:9a:db:d9:3a:2b:5e:15:cd:05:8d:f7:
bb:c9:f1:45:21:2c:db:06:10:e5:b3:7c:03:7c:58:
32:e5:ed:25:ee:73:b0:20:86:18:0d:ef:08:c9:2a:
59:1d:a8:98:8e:bb:bf:24:fa:50:f4:2b:55:e3:b9:
a9:a5:1a:4a:86:1e:2c:f2:bd:79:fb:27:ea:ae:1b:
6e:0f:b3:d6:b8:09:09:64:d4:e9:de:f2:dc:4f:70:
47:29:fa:f9:e1:ea:b4:53:19:10:1b:69:28:55:1a:
5f:c3:8b:09:5f:0e:c3:51:f9:8d:83:62:8c:63:21:
3d:59:7a:4c:a7:44:08:fb:38:a5:c6:ae:88:ca:24:
13:33:2d:bd:20:24:83:df:99:0c:51:61:a9:c7:24:
48:ef:f8:a7:5e:c9:c6:49:0a:d2:63:da:17:5b:17:
4e:a6:b9:9b:7f:73:84:22:7f:3d:11:77:74:00:01:
ac:84:37:df:95:39:0f:00:9b:4b:d0:4b:a9:8a:6c:
24:b6:01:63:7b:c5:4f:40:03:ee:ae:18:d4:94:19:
aa:8d:29:e5:4f:66:6f:c6:dc:b8:f5:95:fe:fb:99:
92:14:38:46:66:89:c9:d1:11:d8:f0:63:d8:a1:bf:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:3F:B4:CF:6B:1C:66:BB:23:3A:7C:D2:28:A4:89:8B:AF:E2:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1693f1a3-2a38-33eb-b67a-253cf8240add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:93:67:31:e0:85:54:46:dd:aa:46:d4:7b:2d:dc:0f:5a:ee:
47:b2:73:8d:ff:b1:97:bc:61:85:56:48:0c:be:4c:54:27:6a:
43:7f:b4:9a:30:b8:a9:95:d3:a1:4a:81:d4:f5:bb:e6:2e:bd:
6a:ea:ba:88:59:f9:f3:b6:e8:5d:5c:d7:f7:12:1d:9f:7e:fe:
8b:b4:66:ff:3f:c4:62:bc:1e:f0:f2:dd:5f:53:c9:c9:15:c6:
be:17:da:a7:3c:32:d2:9f:f6:14:87:49:9f:24:a8:f1:00:70:
02:44:1b:ea:f8:ac:3c:52:54:4d:10:70:86:b9:04:9e:aa:68:
80:4b:7f:ab:56:6b:a2:73:cf:78:1b:b7:d7:03:21:62:83:b1:
70:d0:9b:f7:56:0e:89:4e:9e:5e:31:a1:4c:b0:fb:f2:1d:6e:
a2:f1:8b:bb:6e:51:6e:37:5b:59:fd:18:82:2d:6a:1f:e9:ba:
c2:cf:06:7a:1a:24:bf:30:6f:5c:12:c4:13:5a:13:4d:a7:9a:
b6:d9:c7:a3:4c:69:ee:14:d0:4b:e8:55:d4:07:3a:8d:c7:bb:
09:c1:14:5b:fd:3d:ce:98:8a:da:08:ae:e9:07:c2:a8:59:2a:
42:43:70:17:18:30:82:1b:de:02:d6:9c:f5:7e:0b:a1:95:1e:
49:03:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:22:57 2026 by rpki-client