
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa
File: 35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa (raw, json)
Hash identifier: yw+KVpE+OWZvfKEiAa70A4TyFYLWT5D1fuquOkkP7qo=
Subject key identifier: BA:66:D5:9B:7F:5C:54:01:BA:30:9B:1D:D4:AC:9C:63:A3:34:DE:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0672727C77408CACF87128C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396608
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:72:7c:77:40:8c:ac:f8:71:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=7d28751c-df89-426b-8de1-acb30388ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:e6:65:04:89:e0:ea:77:18:bc:7f:4d:b7:
c1:37:55:3b:15:53:2e:a0:50:53:55:80:a4:7a:c6:
19:35:8b:ae:9e:48:a9:d1:17:8a:71:17:10:9b:8f:
6b:83:b3:c8:1d:d1:6d:32:05:71:b2:a1:fc:c1:11:
04:c9:fa:7e:bf:82:60:dc:96:d7:85:cd:8d:cb:59:
71:d9:b7:a1:86:b5:50:ba:a9:b0:69:27:23:d6:8e:
58:db:28:f1:11:f7:8e:91:11:8d:f2:e3:51:cc:e2:
2f:e0:4f:bc:5c:0e:88:89:be:4e:16:f0:65:c0:33:
76:3b:34:a4:6d:7d:b0:6a:6e:c8:a7:fe:ec:a4:98:
0f:42:92:50:0b:28:f1:cd:2a:2d:fc:44:45:32:22:
a1:46:17:63:a5:a3:d2:32:80:ff:c3:ce:24:79:66:
57:4e:70:51:a7:4d:bb:a7:31:ff:5f:b9:1c:54:33:
cd:90:02:1e:ba:40:6e:0b:af:18:4d:3d:f3:d4:6c:
bf:38:c2:0b:76:8f:0a:e6:f5:ff:71:e0:d8:f9:49:
97:d9:78:2f:c7:0c:32:88:26:66:97:8b:b9:cd:46:
88:fe:b0:12:59:e8:20:a2:ae:ad:fb:78:1e:b9:f6:
cd:ec:39:06:55:91:2e:38:0b:07:02:b7:65:ba:79:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:D5:9B:7F:5C:54:01:BA:30:9B:1D:D4:AC:9C:63:A3:34:DE:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:d4:c0:fd:2b:21:bf:19:4c:9f:2c:2e:a6:ef:37:a0:25:a0:
3a:aa:d5:fa:69:09:0d:05:da:c9:be:92:8f:e4:be:f1:54:99:
32:c5:c8:2d:de:5f:b0:bc:b6:a3:8b:04:99:6a:64:40:08:4d:
e8:4e:a1:6f:e1:fe:c4:46:6c:07:bd:2d:6c:c2:0e:73:ce:53:
f0:31:0f:6d:78:d7:87:d0:4d:9b:4a:e8:bf:c2:a8:5f:ed:79:
d9:d1:df:af:a6:d2:8d:f6:41:c1:25:a6:3f:ae:8c:05:1c:f1:
33:df:cf:7a:4e:de:00:e9:43:6b:55:dc:42:ea:e4:29:ce:53:
fd:63:f3:ae:95:98:50:e8:15:f5:6a:68:ea:ee:ae:ef:cf:23:
44:06:09:af:1f:e6:40:eb:4b:01:36:59:76:d7:1e:90:43:87:
da:d2:ae:2e:9f:0f:57:dc:ec:ea:0f:c4:b2:85:01:72:d6:ae:
f2:91:b9:78:aa:2b:51:15:5e:63:f1:41:f5:8f:96:a5:9a:a8:
34:96:7c:22:03:31:74:d9:46:08:5c:f9:3f:30:65:0b:3f:90:
8e:1d:a3:18:07:c4:9a:82:99:15:ac:60:43:32:dd:12:31:bc:
94:40:67:ac:ee:c8:ac:d4:07:84:a2:44:3d:e5:03:be:ad:94:
de:1a:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:21:55 2026 by rpki-client