
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa
File: c3bf3d4e-8b15-31ab-953b-979086f42c13.roa (raw, json)
Hash identifier: pJVu7fTWFksXpwOvACbgpwELDMR2cLoZfOiGOq4KgdQ=
Subject key identifier: 73:43:3B:7B:4B:D5:9F:03:D8:44:59:9D:9C:FB:88:6F:52:1A:00:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F23C280694D5397773E622480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 36625
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:80:69:4d:53:97:77:3e:62:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=d3f29ac9-9008-496a-9f68-74f70f344d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:55:11:86:72:a1:7f:6a:67:0a:67:89:79:
ad:3c:a4:92:97:d0:13:81:55:b4:08:85:e1:8d:92:
2c:6a:2f:04:f9:ce:52:69:91:11:36:c5:5f:f0:56:
1e:2e:3b:e7:44:df:59:48:b0:20:0c:f2:b7:ee:f0:
39:f8:da:77:be:a2:10:55:7d:38:a1:c8:79:0a:ce:
e2:22:86:9a:69:96:c7:6b:53:8c:39:8a:f2:72:5b:
bb:8d:3b:95:73:1c:65:ab:78:56:05:df:bc:12:ad:
a8:d1:1b:e0:06:7c:8d:2c:37:8f:9c:c1:b9:7a:a3:
de:79:b5:93:b0:85:aa:6f:c6:5f:ac:18:f6:ef:5f:
a7:29:dc:d5:34:fe:8b:11:49:29:2b:ba:79:fe:39:
bb:c5:5a:2c:87:ec:b0:1f:41:fc:cf:95:63:55:cb:
66:4a:78:f0:7a:da:82:f8:71:f6:68:02:f2:2e:4f:
bf:f5:d5:51:65:b9:f3:da:e6:13:37:2e:92:ec:6e:
49:fb:a2:51:27:a2:65:1c:67:8a:cf:71:57:eb:33:
0b:e5:57:03:8d:57:99:30:ac:f6:54:ed:fc:1d:a4:
de:4d:86:2b:4b:ec:26:68:51:59:70:fa:0d:3f:15:
3d:9e:68:fb:f1:6e:53:a2:4d:a0:4e:b3:0a:10:8b:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:43:3B:7B:4B:D5:9F:03:D8:44:59:9D:9C:FB:88:6F:52:1A:00:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:43:9c:f9:f0:8f:17:50:36:42:d4:22:dd:4b:06:dc:ce:da:
f2:a3:f9:b4:b4:54:b8:82:4e:bc:e8:54:cb:a4:eb:a1:1d:9e:
04:35:b4:63:9d:4f:40:fa:d4:74:c3:b5:92:f1:a4:1e:a8:c6:
86:c8:1d:54:7f:30:da:bd:19:39:28:12:c1:39:ee:3e:a3:15:
1e:66:6d:5d:88:f9:fb:af:df:54:46:14:6d:c3:39:08:e8:37:
5c:11:91:5e:a1:6f:40:ba:74:c6:7a:3f:22:66:93:4a:b4:e2:
7d:c3:98:73:4e:f9:ab:ad:a1:b0:51:f4:cb:25:97:08:39:cd:
f3:77:d6:11:8e:60:73:3b:4f:64:b8:9b:25:0a:dd:ad:24:3e:
5f:de:fd:bc:88:ec:dd:0b:f2:75:d6:a8:58:7b:11:82:0e:59:
8f:82:64:65:8d:e9:a5:a4:36:43:4d:03:76:e7:bb:30:55:02:
1a:ce:02:26:21:8d:32:8d:41:c8:82:79:e3:26:d2:70:5f:51:
ef:7a:5e:c0:c8:34:bc:9d:02:a6:ed:18:02:61:09:08:84:59:
50:e2:87:3f:4e:74:b4:b9:9a:25:a3:71:9c:16:d6:f5:75:09:
f6:a5:cd:a4:41:ab:d0:e3:85:a1:1b:d0:88:b5:48:45:04:e0:
35:d5:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:32:56 2026 by rpki-client