
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
File: c3bab711-1fdc-38fc-bd8d-74a23887793e.roa (raw, json)
Hash identifier: cUxTGFRHeEopBQz2jDjonXG0M+9C0dFKkNu3qHEKgWY=
Subject key identifier: 72:74:01:FC:D9:50:57:25:98:68:7E:7A:58:31:6D:FC:FE:EE:B0:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D7A0544EB2C224C0284251710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 396582
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:44:eb:2c:22:4c:02:84:25:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=96e2c08d-22c7-4e39-88e6-3d4be44c760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:67:b4:05:2d:a8:a3:05:25:fe:a6:c0:95:
cd:ab:a3:46:26:84:e1:96:bb:ad:58:4f:29:9b:cb:
17:e1:1c:69:49:fc:62:4b:ac:2e:d0:82:42:ff:81:
0e:89:b1:4d:fa:20:9c:75:ad:4f:ef:8b:b0:c3:92:
5c:f0:61:0d:53:d1:03:6f:d4:99:f7:bc:b8:87:2d:
a3:74:02:d3:58:d8:38:1c:dc:b0:ff:be:3a:79:54:
86:07:86:27:15:97:4b:75:9f:2c:e0:2b:20:e1:bc:
31:e1:ef:8e:e6:13:8c:86:c7:4a:0e:ae:4f:f1:56:
ae:4a:5c:65:fc:30:27:9f:12:35:75:c1:38:19:4d:
1e:ae:8e:ea:e0:6f:7f:e1:29:56:bc:4f:9e:8f:12:
e4:87:92:96:2b:74:1f:63:6c:72:5a:79:cc:f9:71:
2b:ba:dc:78:7b:5a:c8:28:d3:e1:7e:f9:43:91:f4:
ca:e2:47:cf:d1:b5:83:72:f0:15:7f:93:6d:66:e5:
c3:0b:e6:5b:e6:be:e9:d7:d0:d3:51:1d:f2:35:09:
10:28:de:f0:21:1f:ac:d2:1b:60:d9:3e:69:ec:ce:
89:7d:31:ac:e5:ef:76:12:78:5b:11:c9:ab:bc:35:
be:71:9c:3f:86:be:f9:99:73:27:ea:e1:b0:78:2b:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:01:FC:D9:50:57:25:98:68:7E:7A:58:31:6D:FC:FE:EE:B0:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1e:75:0e:03:ec:fa:88:7f:32:f0:a0:9f:83:1f:00:87:ec:
33:2e:23:35:9a:69:61:ef:49:e8:be:a8:ea:e1:5a:9a:5d:49:
a4:66:cb:47:9d:b0:cb:6f:93:0f:54:b1:9a:92:c7:ab:19:00:
0b:7a:04:04:24:2b:18:7a:31:62:c7:c2:54:66:9a:e3:00:87:
a0:90:30:d9:e4:e4:84:41:c3:9b:91:f9:49:c7:de:35:1e:6a:
85:8c:85:ca:f7:98:c6:8b:48:7d:ac:2b:e9:38:57:9c:03:54:
21:bd:28:ff:e0:b0:74:72:fa:f3:c5:50:05:74:ea:4a:c7:8c:
28:b0:5a:77:09:2c:8c:8f:f3:1c:8d:13:43:8f:87:26:c5:4c:
29:94:09:8b:0f:95:51:df:b7:b1:00:b6:7b:22:75:0e:a9:c8:
68:95:54:7f:99:60:c9:24:35:aa:fd:48:f1:37:9c:0b:dc:e8:
9c:1a:01:5a:b7:68:16:58:4f:93:6e:96:af:cc:df:12:3f:16:
da:8c:33:67:13:f3:39:f6:ee:f7:2d:26:68:94:39:9d:cc:27:
97:c6:a6:c3:79:76:a0:da:65:ce:21:36:af:85:c3:ac:e7:d0:
65:de:25:a3:d3:55:8a:72:56:00:67:24:c6:aa:ce:bc:0c:81:
4b:4c:df:b9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE16BUTrLCJMAoQlFxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
OTZlMmMwOGQtMjJjNy00ZTM5LTg4ZTYtM2Q0YmU0NGM3NjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9ntAUtqKMFJf6mwJXNq6NGJoThlrutWE8p
m8sX4RxpSfxiS6wu0IJC/4EOibFN+iCcda1P74uww5Jc8GENU9EDb9SZ97y4hy2j
dALTWNg4HNyw/746eVSGB4YnFZdLdZ8s4Csg4bwx4e+O5hOMhsdKDq5P8VauSlxl
/DAnnxI1dcE4GU0ero7q4G9/4SlWvE+ejxLkh5KWK3QfY2xyWnnM+XErutx4e1rI
KNPhfvlDkfTK4kfP0bWDcvAVf5NtZuXDC+Zb5r7p19DTUR3yNQkQKN7wIR+s0htg
2T5p7M6JfTGs5e92EnhbEcmrvDW+cZw/hr75mXMn6uGweCsZmwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHJ0AfzZUFclmGh+elgxbfz+7rAFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNiYWI3MTEtMWZkYy0z
OGZjLWJkOGQtNzRhMjM4ODc3OTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAeHnUOA+z6iH8y8KCfgx8Ah+wzLiM1mmlh70no
vqjq4VqaXUmkZstHnbDLb5MPVLGakserGQALegQEJCsYejFix8JUZprjAIegkDDZ
5OSEQcObkflJx941HmqFjIXK95jGi0h9rCvpOFecA1QhvSj/4LB0cvrzxVAFdOpK
x4wosFp3CSyMj/McjRNDj4cmxUwplAmLD5VR37exALZ7InUOqcholVR/mWDJJDWq
/UjxN5wL3OicGgFat2gWWE+TbpavzN8SPxbajDNnE/M59u73LSZolDmdzCeXxqbD
eXag2mXOITavhcOs59Bl3iWj01WKclYAZyTGqs68DIFLTN+5
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:23 2026 by rpki-client