
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d32ee82-aa6a-375e-bded-06160f3ad2f2.roa
File: 6d32ee82-aa6a-375e-bded-06160f3ad2f2.roa (raw, json)
Hash identifier: 7BWWR1KRDv/ED0pYTpl+e/qqwrREyP9PeCbhUBVbwnY=
Subject key identifier: 9E:75:96:EE:9D:85:ED:F8:54:71:85:BF:88:E0:BC:A6:4B:0E:7A:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B2083E6F1CEA85E7341380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d32ee82-aa6a-375e-bded-06160f3ad2f2.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 396550
IP address blocks: 2001:500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:08:3e:6f:1c:ea:85:e7:34:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=3623d2c7-d2f5-41d5-bb3a-ad3cbbeb35c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:35:24:b1:57:c4:04:05:be:25:b5:6c:e6:
4a:d3:22:1c:93:fc:4b:c1:b8:98:93:f9:db:08:61:
7e:74:d1:3d:f4:6c:b9:ae:9f:43:68:c4:ef:81:8e:
06:c2:34:19:17:95:7f:40:51:1b:ae:99:e2:93:08:
df:fe:8f:81:5d:ce:d0:bb:0a:14:08:f9:9f:5e:0e:
dd:97:c5:17:d1:a0:2c:32:39:39:9a:a7:01:67:d4:
50:1a:11:d8:d1:2d:8c:52:f8:5b:48:62:31:c0:d5:
34:fb:4a:9f:16:48:5f:d3:b1:48:29:89:9a:c7:c1:
b1:d2:72:18:5d:7a:db:72:02:95:fb:3e:f0:ee:2b:
f2:5b:b1:7d:c0:b5:6e:e6:bc:d4:ff:8a:0c:6c:af:
c7:48:79:0f:be:34:a9:76:99:58:19:b2:bc:5d:8f:
ee:af:27:a1:9d:c5:13:b2:91:07:88:04:da:be:5f:
4f:c0:af:c3:b3:25:58:a1:9a:bc:34:69:48:e4:be:
e0:bd:47:80:88:d1:2d:5d:1e:69:ac:ed:56:a3:32:
43:e0:69:5a:41:99:4d:26:17:86:a7:25:00:f4:3d:
ab:07:d4:06:69:5a:69:d2:e2:e5:0d:be:dd:e4:77:
2f:58:96:13:33:66:5e:59:b9:85:f9:18:94:f1:b4:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:96:EE:9D:85:ED:F8:54:71:85:BF:88:E0:BC:A6:4B:0E:7A:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d32ee82-aa6a-375e-bded-06160f3ad2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:70:e0:36:ee:c8:aa:92:d6:f6:3a:71:24:89:c1:f4:73:23:
87:22:70:39:f2:a7:75:18:e4:29:c6:c9:ac:aa:f3:b5:71:8f:
55:e1:a4:5b:41:4f:dc:f8:20:1f:19:7c:23:6c:ab:c5:40:78:
14:69:28:c6:2d:b5:dc:49:ed:ae:6e:2d:35:f4:1e:7b:c3:21:
aa:78:db:06:f3:04:6d:ec:6f:91:6b:69:4e:f2:05:75:39:02:
1e:cb:e3:8c:1e:02:a0:23:26:b2:e9:7c:88:02:45:d0:ef:c2:
1c:56:c8:82:60:d5:32:44:a4:77:03:9d:37:9d:52:d4:9d:d0:
a3:a5:03:ab:26:fc:a6:88:44:73:20:66:e1:26:79:c6:40:58:
f6:c0:d9:a5:33:73:fc:4c:06:4f:ad:72:41:04:2a:c8:e3:c4:
2c:cd:04:10:88:a7:ee:f7:13:fc:ca:a0:92:f3:3c:3c:6d:34:
5f:1e:f8:e5:c0:73:22:45:a9:d6:f1:78:f5:4c:38:32:53:b3:
ba:a3:d5:d7:ee:21:fa:54:61:d8:c9:39:07:8f:f7:4c:05:4b:
3c:91:2c:84:5c:34:9d:04:02:2f:c2:c2:f5:77:8d:b5:eb:59:
ee:f5:02:74:40:64:be:b0:51:c8:b5:01:6d:cb:ba:5e:be:2a:
bb:d4:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:13 2026 by rpki-client