
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa
File: dd0768fe-5afc-3aaf-8d95-94daf4658963.roa (raw, json)
Hash identifier: LD2aalHnPh43HwkykwX8l/UTZ2Zsu59cM1eGqwXTOHo=
Subject key identifier: 9F:F9:87:B3:91:3A:6C:90:58:83:12:75:A0:34:D7:C8:9F:03:BD:EE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F19FCF476AC3351383A671D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa
Signing time: Tue 08 Sep 2026 01:00:12 +0000
ROA not before: Tue 08 Sep 2026 01:00:12 +0000
ROA not after: Mon 07 Dec 2026 02:00:12 +0000
asID: 396588
IP address blocks: 2001:500:7967::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:19:fc:f4:76:ac:33:51:38:3a:67:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 8 01:00:12 2026 GMT
Not After : Dec 7 02:00:12 2026 GMT
Subject: CN=572e970e-cdbe-4cfd-8791-6365f8642122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:3b:f7:0f:5f:05:4d:53:86:60:b1:95:1e:
5a:c9:c6:a7:a9:1d:5d:cc:07:ee:93:d7:25:b5:74:
7f:37:4c:d8:b6:c7:60:f7:f9:c1:0e:a2:43:c9:73:
ab:d0:d6:b5:d4:18:b5:dd:b5:6c:69:7c:38:8e:3b:
49:5f:03:69:2a:06:25:2e:5b:e5:75:83:1b:76:62:
e6:8c:9d:7d:39:71:da:ae:49:16:d4:70:ab:0f:fd:
94:b7:eb:62:67:c7:5a:5e:84:02:d2:68:1f:f9:ac:
5f:96:1f:e9:90:25:48:03:25:dd:7d:b8:aa:0a:f1:
41:2e:eb:b9:da:34:4f:55:31:c0:96:46:01:7b:fc:
e9:2b:2a:bc:de:76:67:f2:c7:fe:73:22:a2:76:05:
56:19:08:ac:bf:ab:78:0e:de:db:71:f7:b6:a9:0c:
17:d2:e7:72:67:56:3d:e7:b1:ad:cf:fc:44:e6:1a:
ad:3c:3b:18:bc:ab:db:60:f3:45:bc:a2:81:63:cf:
b0:23:26:71:84:ec:75:94:88:3c:54:13:19:38:9a:
3f:98:7a:2c:75:a5:b9:5c:86:cf:82:dd:10:08:52:
06:53:0e:33:45:b4:22:0f:ed:45:cf:26:87:94:36:
59:1d:6b:32:f4:65:2f:79:37:f9:b9:e3:81:ab:1a:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:87:B3:91:3A:6C:90:58:83:12:75:A0:34:D7:C8:9F:03:BD:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:32:5a:2b:43:89:e6:e2:8e:ba:67:3c:c9:e1:3d:bf:e1:ee:
5e:46:98:9a:12:32:8a:1c:7e:db:8e:61:22:59:75:c5:fc:9a:
c9:0b:39:be:1b:f3:7f:2e:66:d5:47:f3:d6:d4:0e:7c:a3:a0:
eb:6e:7d:22:37:56:72:8d:dc:ce:73:da:21:a6:a1:d9:d8:39:
5d:92:24:af:c2:a5:6f:82:35:32:bd:30:69:bc:8e:7d:64:78:
b9:08:0a:37:2a:c9:ce:f4:2f:ef:ff:7e:20:fd:38:8b:9f:8c:
6a:2f:92:a0:94:76:30:98:1e:c3:e5:28:f4:b2:0d:95:67:e7:
3b:87:dc:fd:9a:9f:67:b4:3b:f4:d7:34:ba:2b:69:65:a2:84:
21:f1:8a:f7:ee:1b:c8:1f:73:a8:0e:7a:90:78:b9:fc:c4:8f:
11:15:99:0e:ed:e8:ff:5d:47:a7:f6:3d:9b:26:5e:13:be:e5:
1a:31:82:f4:45:d0:19:90:96:2b:79:5f:be:1b:ad:29:2c:d0:
4d:76:f2:84:76:9b:48:a9:f4:bf:4a:28:54:64:e8:24:09:75:
27:3b:d2:de:7a:62:09:10:e0:b9:59:be:9b:4d:21:2f:b4:ad:
9f:9f:ee:b1:98:ae:e4:c4:b2:97:fb:77:2d:5b:e5:a1:ff:10:
da:70:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:54:00 2026 by rpki-client