
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47cb1229-5640-3ee6-ab4e-9adbc9207410.roa
File: 47cb1229-5640-3ee6-ab4e-9adbc9207410.roa (raw, json)
Hash identifier: REtcSIPxWc1UgrO1n3/VncMxJ7UgPlNVx7hYUYd5HBI=
Subject key identifier: 95:AE:0D:21:3A:1B:14:07:68:B3:47:2D:A1:8E:38:A2:BF:24:93:28
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0AA2287AA4ECCD9F3D062DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47cb1229-5640-3ee6-ab4e-9adbc9207410.roa
Signing time: Wed 02 Sep 2026 13:00:12 +0000
ROA not before: Wed 02 Sep 2026 13:00:12 +0000
ROA not after: Tue 01 Dec 2026 14:00:12 +0000
asID: 396608
IP address blocks: 2001:502:8cc::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:a2:28:7a:a4:ec:cd:9f:3d:06:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 13:00:12 2026 GMT
Not After : Dec 1 14:00:12 2026 GMT
Subject: CN=4bf961f6-53cd-4c90-acbf-54297914b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d6:56:71:a8:58:0a:70:5c:e9:2d:ed:4c:ac:
ab:4c:1b:4d:93:42:40:aa:2b:62:88:8e:59:e8:53:
8a:a3:c5:4d:7e:6b:ab:82:27:bc:41:b0:83:94:ee:
64:48:cd:ab:8b:b3:ca:5f:e8:c9:9c:f2:11:be:d7:
88:db:70:c5:3c:2c:a9:26:f5:f4:65:34:2a:cf:75:
0c:77:09:50:46:94:83:fc:43:55:bd:47:7e:36:9c:
8f:0a:a9:6f:b7:b0:4c:e6:50:34:f3:f8:82:96:ce:
e2:30:03:d7:1b:2e:65:90:7c:f1:2d:19:8c:d6:78:
68:62:c8:a6:ed:df:9f:7f:18:5e:a5:08:a9:e5:15:
51:a2:fe:04:69:d5:8e:2b:6b:8d:f1:e7:17:9e:4c:
1e:fa:4c:07:26:5c:19:77:54:88:c4:88:61:12:a5:
2c:0d:82:95:10:30:36:92:c8:75:58:3f:d9:b2:22:
a6:89:a1:52:9e:6b:a4:b9:af:2e:c4:d3:5b:6c:16:
90:5a:6d:ac:fa:4f:2f:9d:d2:f4:44:bf:55:48:fa:
33:ac:3f:2f:61:c8:03:72:cd:d6:c3:1e:e2:b6:e8:
e7:e8:28:85:f1:48:f5:d3:98:98:07:d0:f1:fc:43:
a3:1e:46:38:f7:5d:ef:fd:e2:7f:25:79:a2:78:e6:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:0D:21:3A:1B:14:07:68:B3:47:2D:A1:8E:38:A2:BF:24:93:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47cb1229-5640-3ee6-ab4e-9adbc9207410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:51:04:6c:bf:87:3b:29:08:30:7e:1c:26:1a:ac:6c:b4:74:
08:52:aa:af:ad:d6:10:9c:32:1c:e2:94:a6:9f:f2:34:d3:71:
66:d3:6c:f4:2d:18:8d:40:da:18:93:c7:87:62:24:12:41:ae:
63:3d:e7:b0:a3:b3:a1:11:20:21:b0:30:74:f3:d2:92:9a:da:
43:0d:92:df:13:3f:c8:00:a0:b2:f4:75:11:63:37:c6:7e:4f:
6d:7e:9d:e3:ee:9d:0e:f2:f1:3e:8d:69:df:db:a9:fe:11:5f:
d6:ca:74:1e:33:50:ec:4c:b4:b6:a2:51:f1:8c:92:b4:96:80:
3c:30:37:11:51:89:82:2d:13:68:03:db:b9:2a:f9:ef:81:fb:
cd:40:12:25:6c:62:69:17:1c:88:17:ee:35:98:18:8d:c8:54:
32:e2:05:1c:70:ee:af:dd:93:5b:c7:cc:1e:f1:24:c1:71:aa:
6d:b2:5a:de:9a:24:5a:39:58:22:f4:6b:66:a9:9d:02:3b:5f:
b9:f9:bf:02:49:16:ae:34:8f:29:0d:64:50:13:0e:16:35:aa:
13:cb:c6:e0:f4:ab:81:23:7f:c3:4c:7c:c2:00:97:35:86:e0:
da:13:57:91:6a:65:ea:dc:47:4c:fc:c5:b8:fb:b7:c0:63:8a:
90:94:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:57:13 2026 by rpki-client