
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
File: 38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa (raw, json)
Hash identifier: XbbfoU4yfKyMYzop7AC6vvAve1ueQK49U894jTHIPwo=
Subject key identifier: 7F:DA:3D:1A:D9:1E:7F:6E:A4:1A:58:20:4E:FE:7C:A6:17:82:DC:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF1821B5107D828585DFE9E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 211369
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:1b:51:07:d8:28:58:5d:fe:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=38dd0848-cde7-4233-8646-84708e658287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:b7:9a:90:03:4b:9a:d7:88:46:b7:0f:51:
d6:62:a2:89:d7:93:27:37:03:86:e6:d8:8e:78:19:
d5:31:c1:9b:ae:d9:c1:a3:03:f5:07:cb:61:0b:e7:
3a:84:72:e6:8a:ea:3d:a0:90:12:95:e6:e8:64:c8:
41:3e:f9:74:3e:b9:e9:31:40:54:ba:42:19:c9:c9:
3f:7d:ba:d3:c8:23:a0:ae:b8:ff:4f:3e:52:ea:df:
0c:cc:1d:18:6b:b7:22:5f:91:55:d6:b3:10:69:a8:
02:9a:a6:00:95:aa:67:b0:4b:b2:24:2c:c1:04:8b:
1c:04:8e:a7:6d:24:0c:22:a8:3c:c0:14:3e:39:0c:
9c:1b:ca:ab:dd:9a:7c:b0:c6:15:1b:a2:cf:64:d4:
9c:61:80:4f:b7:b9:40:b4:ae:2f:f3:8a:19:de:36:
21:b9:62:8f:f5:68:05:bf:32:fe:eb:40:3e:ff:e0:
d3:f4:86:9e:53:0e:bb:c1:44:0f:64:66:76:d1:1b:
8c:c3:c7:ea:44:98:49:1d:82:d3:8a:26:5b:b6:f4:
17:e4:31:27:4f:78:13:73:7c:81:43:ae:49:55:1f:
4d:18:af:bd:e2:b8:b0:92:6e:3d:90:c9:0a:07:13:
75:69:fc:06:a8:b6:cc:39:9b:92:91:27:aa:d8:f0:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:3D:1A:D9:1E:7F:6E:A4:1A:58:20:4E:FE:7C:A6:17:82:DC:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:f3:49:13:2b:a4:7c:57:b1:d7:92:2c:63:8a:e1:60:84:89:
b0:7c:5e:5e:88:f4:83:45:b8:02:12:2d:c1:cb:74:99:64:d3:
a6:d1:fe:f9:56:bb:a0:2d:de:db:0b:b0:a6:d4:2c:27:7d:e3:
40:bb:9f:0f:b7:ed:e2:77:1f:85:e0:3f:79:ef:ca:9f:3a:5f:
0b:f1:00:be:c4:d8:20:49:a0:34:a0:c3:1a:e4:5c:46:5b:6b:
ba:41:31:62:25:31:b3:40:26:26:0c:10:29:55:65:fa:fb:17:
57:9c:18:3b:f7:15:8c:38:b5:87:8e:21:84:c4:fa:04:57:33:
12:be:62:8a:ca:9a:09:cd:6f:a4:fa:77:ea:cd:3e:63:10:f5:
05:e3:50:da:65:ae:61:e1:b7:42:a1:e1:0c:8d:11:92:b8:97:
0c:90:74:9a:ed:9b:4e:9d:87:b6:2d:c3:01:97:12:5c:6a:2c:
38:44:68:79:18:0c:6f:89:35:34:31:83:16:36:85:ee:23:62:
32:80:b3:01:00:1b:1e:bd:6c:b1:9b:3f:17:a0:db:7d:e3:4e:
2c:81:e8:c0:3e:11:a1:02:79:eb:8c:e6:7b:15:0e:fb:e6:ce:
74:80:5e:ae:14:93:9a:e3:a2:19:e8:38:f4:49:c3:6d:ce:14:
b3:8b:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:17:40 2026 by rpki-client