
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
File: 436394c3-8039-3911-9e8f-576517a3fbc8.roa (raw, json)
Hash identifier: zCjXfKgC93lpwl1nvErT2JDBVBHVoh5SwYy985urLZw=
Subject key identifier: A3:E6:4C:41:12:05:15:E7:A5:07:5F:62:59:83:07:DB:11:DA:09:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DE41B6133038D626D6AA87300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 397211
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:61:33:03:8d:62:6d:6a:a8:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=a8cbdccc-115d-4b77-b66f-6533c568dbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:31:65:47:72:a5:a4:e8:fa:b6:2c:72:39:
b7:53:a6:a6:8d:e4:07:dc:cb:09:6a:24:ec:44:0d:
9d:92:27:55:cd:1e:9f:58:4c:26:70:97:a0:25:cd:
04:b6:5a:a5:9f:79:54:93:12:b8:c0:0c:3b:f0:9b:
7b:69:ad:8f:27:f2:bd:7f:22:58:9a:7d:20:9e:5c:
3e:4f:2f:fa:2f:1b:dd:5c:8b:fa:0b:79:37:4e:d6:
9d:9b:88:26:79:08:46:12:17:d9:7e:1b:67:f6:76:
95:1e:50:d8:77:29:c2:c3:ab:d1:ed:9d:2a:f2:51:
34:4f:bf:e5:b1:57:7a:28:04:7f:1f:fb:01:8f:4c:
b2:39:f7:f7:0c:e6:d8:65:48:58:b8:f4:cb:59:71:
af:f3:45:98:18:e6:1c:0a:27:7a:09:29:de:f1:06:
e6:3f:ae:fd:f9:ae:dc:64:34:d3:d3:9e:72:07:97:
7c:32:52:4b:99:50:4c:bc:2e:5f:1e:ef:8c:d1:67:
f4:e8:db:68:72:59:42:73:89:d0:94:46:1b:59:d7:
b4:8a:24:3b:2a:e5:ca:c6:1a:c0:36:25:ca:79:e2:
d4:4e:b8:14:36:1f:33:fe:55:a1:25:bf:68:81:3c:
e5:d5:c3:1a:96:78:d8:41:70:38:cf:30:a0:96:6f:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:4C:41:12:05:15:E7:A5:07:5F:62:59:83:07:DB:11:DA:09:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:17:0a:86:90:21:db:7b:73:54:ec:8e:c6:f9:da:19:9e:c8:
6e:7e:5e:83:a7:67:f3:d4:7b:8e:45:85:a4:8c:73:70:6d:fc:
9a:ba:06:20:3c:97:84:bc:49:c7:31:ec:3a:48:11:c0:e8:6b:
91:d6:ee:54:de:68:8f:c3:88:88:53:72:cd:61:33:71:60:54:
52:f2:6a:02:81:d7:7e:61:94:7c:0f:cd:09:6b:44:80:be:19:
24:44:6f:5c:a2:21:a1:c8:a7:91:b1:7f:4d:91:7d:e3:6d:8b:
6b:d9:cf:9a:c7:5a:7e:92:cb:49:3e:77:8b:13:a5:09:dc:b3:
68:77:86:66:72:29:f0:cf:3a:07:ed:43:a6:e6:f6:cd:fc:4a:
81:f0:33:e5:9c:28:71:fb:de:0e:74:e2:f7:62:f2:00:dd:ba:
23:4e:1c:b7:fa:0b:46:c9:2c:4c:a8:f6:37:d3:4d:53:60:fa:
7e:0f:ca:86:3d:71:74:39:cf:b9:ea:58:ec:78:5e:77:71:f7:
62:f9:c0:17:fa:64:1c:be:2b:8b:8a:e1:af:75:df:8d:42:ae:
d6:e0:65:37:6a:70:1f:10:9e:f5:f9:b8:21:c7:aa:ab:7c:31:
63:d2:ec:74:c9:da:bb:6a:d2:cc:c8:18:a2:13:38:c0:05:72:
bc:0d:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:23 2026 by rpki-client