
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa
File: ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa (raw, json)
Hash identifier: o9CeYgxtjZ1T53DXBSwND6yES2T+s4lSR/I5g+FI5+U=
Subject key identifier: F3:00:C2:A3:75:F5:FD:48:4E:EC:E8:CC:E7:FC:38:A2:0F:61:91:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D5E1A837767F120160D779400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 396600
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:83:77:67:f1:20:16:0d:77:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=45de08f5-7e0f-4084-81c4-f92e21d82828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:c5:bb:c9:c6:ec:f2:b9:e3:89:5a:fc:1a:
e5:93:ae:28:d5:ee:0f:8f:7b:df:16:06:d4:f6:ac:
86:f2:86:6e:50:d6:c4:53:72:58:6d:59:83:de:e3:
54:48:4e:8c:00:0a:be:f2:7a:89:d1:16:1c:b8:67:
62:e3:de:6b:f5:d5:c3:02:53:20:be:1a:c7:9d:7e:
ce:3a:47:da:8b:a5:a3:b1:80:85:1a:f1:26:67:43:
48:8c:48:2d:bf:79:48:c4:d8:6c:14:4b:1f:fc:0b:
1e:d3:ea:94:c5:1b:03:4f:6a:de:f4:df:da:d9:14:
bf:fa:e4:d3:4d:18:ac:78:bd:90:65:c1:3c:41:44:
ad:ad:7f:94:40:81:54:bc:53:6d:91:8b:bd:cc:5d:
29:99:4a:f0:25:c6:09:d2:50:23:d9:a3:a9:a5:12:
b5:02:d1:01:5e:73:f9:32:8b:ec:a8:7c:34:68:19:
76:d0:bb:a3:90:4d:6d:23:62:86:84:59:eb:c7:89:
5d:59:e2:c2:e4:71:47:cf:3f:36:ac:32:c2:37:86:
86:09:f7:d6:38:d1:4c:01:05:8c:c3:e8:a2:26:61:
d2:d2:ad:1f:d6:f1:72:3d:e8:f1:3e:4a:68:a4:86:
d0:72:f7:cd:59:76:de:b4:24:77:6c:44:07:70:de:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:C2:A3:75:F5:FD:48:4E:EC:E8:CC:E7:FC:38:A2:0F:61:91:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:b5:c2:77:b0:47:ef:2c:33:55:11:1b:98:42:02:fc:7f:59:
65:c3:90:16:61:a0:73:ae:1b:28:42:63:f6:fc:64:fd:4c:0d:
18:71:5a:fe:b9:15:91:50:21:49:25:d5:c8:48:91:45:a3:b5:
ea:1c:52:12:aa:e2:00:36:52:3f:fe:72:00:d4:2a:4d:63:13:
89:5d:e5:c5:aa:d1:7b:52:43:cc:a9:13:a3:68:76:6f:5b:72:
f5:84:c4:7e:bf:a1:60:e3:52:18:6c:f8:d9:c8:17:47:cf:fd:
b7:29:c2:d5:33:76:05:fc:28:6d:43:7e:c8:6e:1f:4f:dd:e5:
d0:9e:ca:62:be:6a:71:2f:29:20:fd:4f:b5:d1:81:bb:77:c2:
02:83:e6:c2:a1:51:78:fa:dc:44:2e:3e:be:6e:d9:ed:dd:88:
c5:e8:99:a4:51:d7:45:9f:32:ad:67:f7:85:7b:96:92:23:ae:
69:b6:dd:68:aa:93:4d:09:30:9e:bb:b0:92:95:48:cb:da:ff:
d0:9c:51:23:eb:bf:32:3a:8d:ab:39:10:31:9c:da:ba:00:7c:
e0:59:b8:9b:05:64:8e:37:07:19:b5:85:b3:90:bb:34:fd:de:
27:7f:10:1d:42:71:64:80:2b:a3:ad:11:5a:e4:46:63:a0:77:
97:32:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:24:37 2026 by rpki-client