
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa
File: c6c3fd29-9dca-371f-9a2f-043097e71dde.roa (raw, json)
Hash identifier: AkbZlm53kIU+jl9UBwTPDiX954EPhjQnBdnWqDzuayc=
Subject key identifier: 54:8C:73:B5:B0:E7:6A:3C:D0:1C:75:8F:43:23:CA:6F:1D:76:A5:21
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF01CD201ED5E89AEE0227F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 397199
IP address blocks: 2001:500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:d2:01:ed:5e:89:ae:e0:22:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=da879ead-d3ef-46d2-b349-d33485f4567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:81:ed:79:dc:8d:38:3b:82:0b:da:7d:81:
50:3d:a0:fa:44:2e:ad:67:f1:0e:9c:49:16:7b:55:
3d:2c:ea:90:6a:cd:25:dd:e6:41:07:34:2e:d6:b8:
a3:c5:12:c8:c7:e1:89:a4:6f:62:ed:3c:b9:d4:ab:
82:0f:2c:04:15:6f:b3:e6:6a:81:2e:db:69:e3:bd:
26:04:ff:d2:c2:ac:ac:ba:85:d4:99:9c:00:a5:92:
01:01:3c:87:be:c1:9e:5c:75:56:cb:e1:b3:c3:b1:
96:61:7f:19:26:cf:f2:aa:20:26:57:ac:79:d5:9e:
c0:43:8e:f7:78:7f:55:08:9a:cf:99:80:e7:ed:f8:
75:31:76:1f:2a:ce:e7:6e:6d:d1:8e:99:d2:21:e7:
90:8e:17:3a:85:7e:de:a8:f6:d6:47:dd:32:ee:e9:
3d:8c:67:08:c8:8c:c4:14:0e:f0:03:0b:ef:de:7c:
05:89:b9:e0:e7:a6:73:d7:39:e6:4e:e8:79:ba:29:
e7:17:54:9f:92:d0:25:da:af:f0:39:a2:a1:25:72:
a4:85:4e:97:a9:52:ae:f3:23:fc:a8:1f:7c:f4:2c:
1a:89:d4:fe:b0:38:bf:5f:4c:16:ce:fb:04:f6:df:
e6:1b:0d:a1:b0:f5:8a:ce:05:9c:dd:55:9b:b1:ce:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8C:73:B5:B0:E7:6A:3C:D0:1C:75:8F:43:23:CA:6F:1D:76:A5:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6c3fd29-9dca-371f-9a2f-043097e71dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:92:d0:81:01:8b:ca:1a:ec:73:1e:81:7a:fd:5b:74:a1:29:
e1:e9:31:8f:78:14:7e:56:10:70:be:11:8f:b9:7c:c4:6c:a6:
7c:fa:99:aa:21:4f:18:3f:4f:86:8a:69:2d:13:bb:dd:52:70:
66:39:e4:fe:e5:bf:29:b2:0c:3d:51:20:73:82:16:ee:f0:b4:
a0:87:60:ed:21:22:2a:e8:c4:bd:96:97:dd:d3:be:f8:41:78:
7b:bb:ff:dd:73:04:f7:2a:f7:ec:40:fa:fc:13:67:ad:54:72:
c9:6e:71:e1:9a:ff:1b:22:73:c7:e1:ee:eb:10:0d:bc:52:c5:
51:79:db:8d:5a:b7:88:18:61:00:0b:9f:eb:66:9a:78:92:b4:
69:ff:a1:94:12:36:58:d4:a8:37:c5:54:bd:1f:c6:0e:c8:9e:
d0:49:91:0a:67:3c:7a:18:e8:d0:14:e9:ad:35:c8:08:98:dd:
df:77:4b:04:50:c1:4a:61:39:fb:f4:17:85:7a:d8:ae:99:99:
cc:f2:de:66:bc:28:a9:04:90:4a:dd:9c:f1:d0:58:e8:05:3e:
bc:51:30:ec:51:db:fa:31:b5:66:81:81:28:79:46:29:5e:84:
bb:a2:2d:c8:dc:02:10:a7:57:81:4f:34:ae:c7:e5:dd:0c:59:
03:d6:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:04:30 2026 by rpki-client