
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce8950e6-f7f9-3373-81ba-42ba808cf090.roa
File: ce8950e6-f7f9-3373-81ba-42ba808cf090.roa (raw, json)
Hash identifier: +UiOowrUF8/+N04jNjFDOPtXyEQu6NbReXm4yYopnX0=
Subject key identifier: 08:2E:FD:8F:00:2D:D8:37:D7:5C:0F:4F:CA:67:B1:1C:07:69:24:27
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D5E1A5C5C67BE24DE14717B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce8950e6-f7f9-3373-81ba-42ba808cf090.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 396551
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:5c:5c:67:be:24:de:14:71:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=1b744b44-2ddd-451d-b301-14392bb16ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:3c:3b:75:8e:72:2d:04:6a:1e:09:78:f2:
5b:94:bf:b5:eb:29:74:6c:9d:53:65:cf:c3:49:41:
7e:04:70:fe:2e:56:b7:67:74:c4:ae:43:d6:ad:f5:
be:c9:83:02:bf:d7:c9:88:e5:01:6d:20:a5:9a:fa:
86:2f:7e:b9:02:55:f9:5f:85:b6:1a:66:58:0a:5e:
20:2c:01:dd:50:08:9b:0e:ef:f6:39:8b:85:ac:62:
81:8f:36:b5:3d:9a:c9:21:f8:ae:f3:02:77:fd:e0:
43:4c:9f:1c:59:89:a1:28:5d:28:4e:be:5c:26:fd:
e2:d0:63:17:72:5a:2d:48:26:7f:c7:73:03:ad:5e:
4b:db:62:a2:f0:47:a3:68:37:17:4c:cf:16:44:63:
a0:2b:1a:79:ab:c5:6b:d2:bc:60:90:9d:48:22:cc:
e2:96:6b:a3:4b:43:00:91:56:05:0a:03:4e:aa:fd:
55:b2:fa:5d:5e:0a:2f:e2:06:7f:84:f3:2d:38:a0:
f6:46:b9:63:43:ba:7a:40:5f:a7:1b:be:fe:49:7d:
31:95:17:b7:7d:70:95:07:42:02:b6:1d:0c:ca:fd:
4d:ae:1b:d5:13:8e:4f:9b:5e:b7:48:65:10:e3:32:
ae:d3:54:46:9d:80:54:3b:e2:a6:a8:dd:e3:00:c0:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:FD:8F:00:2D:D8:37:D7:5C:0F:4F:CA:67:B1:1C:07:69:24:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce8950e6-f7f9-3373-81ba-42ba808cf090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:30:78:69:dd:4e:f8:c2:1a:f1:a9:f0:fb:b4:91:bf:23:42:
d4:26:86:57:d9:ec:c7:e1:d7:46:e5:1f:1e:c1:54:80:4a:b7:
60:75:02:65:fe:96:25:fc:79:f3:59:b2:36:03:7a:10:ec:9e:
d6:5a:47:a2:95:9f:41:ff:1f:7e:ce:f3:40:c8:cc:62:79:71:
d5:be:c4:6d:24:7d:99:94:fa:ed:db:68:71:7a:1a:50:a6:3d:
32:a4:5d:a3:bd:53:7f:c7:00:ed:e0:ea:58:59:19:75:d2:96:
6b:9e:89:fe:ae:50:77:aa:da:85:54:6c:0c:f6:44:21:5f:91:
fc:c2:93:95:ab:cc:41:4e:19:07:9f:f4:2f:1a:04:4f:08:7d:
c7:13:19:f9:46:6b:c8:0d:58:a2:a0:a4:7c:f5:46:cf:ff:2a:
fc:54:fb:cf:92:f7:2d:bf:8a:e8:a6:b5:9b:f6:55:18:b8:ec:
28:61:61:3c:ae:73:4f:a6:79:38:5e:8a:73:e8:44:8d:af:29:
50:06:3e:18:07:79:d0:69:17:bc:e4:8d:55:29:f7:9a:01:40:
b1:d3:49:21:25:9d:2f:ed:d6:d6:3a:84:0f:10:df:e0:49:c5:
b0:72:ad:f3:1c:b7:73:d7:8e:44:3c:b7:b8:76:c2:5c:5b:de:
2d:bb:ae:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlxcZ74k3hRxe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MWI3NDRiNDQtMmRkZC00NTFkLWIzMDEtMTQzOTJiYjE2ZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3I8O3WOci0Eah4JePJblL+16yl0bJ1TZc/D
SUF+BHD+Lla3Z3TErkPWrfW+yYMCv9fJiOUBbSClmvqGL365AlX5X4W2GmZYCl4g
LAHdUAibDu/2OYuFrGKBjza1PZrJIfiu8wJ3/eBDTJ8cWYmhKF0oTr5cJv3i0GMX
clotSCZ/x3MDrV5L22Ki8EejaDcXTM8WRGOgKxp5q8Vr0rxgkJ1IIszilmujS0MA
kVYFCgNOqv1VsvpdXgov4gZ/hPMtOKD2RrljQ7p6QF+nG77+SX0xlRe3fXCVB0IC
th0Myv1NrhvVE45Pm163SGUQ4zKu01RGnYBUO+KmqN3jAMAQ8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAgu/Y8ALdg311wPT8pnsRwHaSQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2U4OTUwZTYtZjdmOS0z
MzczLTgxYmEtNDJiYTgwOGNmMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIQweGndTvjCGvGp8Pu0kb8jQtQmhlfZ7Mfh10blHx7BVIBKt2B1
AmX+liX8efNZsjYDehDsntZaR6KVn0H/H37O80DIzGJ5cdW+xG0kfZmU+u3baHF6
GlCmPTKkXaO9U3/HAO3g6lhZGXXSlmueif6uUHeq2oVUbAz2RCFfkfzCk5WrzEFO
GQef9C8aBE8IfccTGflGa8gNWKKgpHz1Rs//KvxU+8+S9y2/iuimtZv2VRi47Chh
YTyuc0+meTheinPoRI2vKVAGPhgHedBpF7zkjVUp95oBQLHTSSElnS/t1tY6hA8Q
3+BJxbByrfMct3PXjkQ8t7h2wlxb3i27rvI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:45 2026 by rpki-client