
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa
File: ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa (raw, json)
Hash identifier: 5xUcrVfeYNwaDTNVwh5tmEwf9VGUJ0Tjsureu+5EgWs=
Subject key identifier: B8:44:01:87:A8:0C:A8:55:82:F4:10:77:17:3A:7D:A6:49:3B:B2:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49894F2E700879524C1B2850
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36632
IP address blocks: 2001:503:ba3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:4f:2e:70:08:79:52:4c:1b:28:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d9e3fd06-2513-4c19-9a10-d4073d87f991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:57:a2:f6:b1:61:77:cb:3a:96:da:34:d2:62:
53:ba:16:8c:67:a5:d7:f2:60:77:8e:8d:27:bf:72:
17:75:df:cb:78:de:09:42:54:f1:7d:69:4d:28:8d:
94:29:03:2a:69:7d:f3:8c:36:36:ec:d1:52:48:87:
91:23:dc:c8:3c:ea:99:97:83:fa:c1:bc:bd:1d:dc:
66:79:56:3d:36:f1:db:c3:a9:30:7a:fb:26:30:4d:
b0:f9:55:0d:6b:58:15:a1:42:66:b9:9a:35:0e:87:
75:8a:0e:59:01:6e:f9:4b:a2:f3:55:c3:0f:a8:6c:
11:88:37:f7:c8:a6:81:24:9e:47:ee:09:f5:5f:04:
81:4c:a0:26:43:ff:ae:0d:9b:c2:a8:19:66:a8:53:
41:bc:a5:b9:26:32:c8:02:c4:fe:72:2f:f5:1a:f6:
e7:00:f5:28:4b:64:ad:f0:b7:55:c5:3a:ac:46:fd:
bf:b9:b0:44:d9:2d:44:53:12:c6:10:e8:0d:1a:f8:
40:4c:3b:39:8e:44:ac:a1:9c:3c:39:35:da:c0:71:
ec:6c:f3:53:3b:5a:b4:7f:70:25:23:7e:47:ef:84:
93:9f:1c:17:d0:88:71:aa:dc:42:3c:c9:72:f0:01:
7e:44:e1:85:1d:02:63:46:08:8f:da:11:54:5d:39:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:01:87:A8:0C:A8:55:82:F4:10:77:17:3A:7D:A6:49:3B:B2:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef14945c-9b07-36ba-84c8-76e6f0417ec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ba3e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c3:7c:0e:4c:ce:36:69:f4:9a:5e:9a:dd:c1:56:cf:10:86:
51:3b:ca:31:18:6c:42:c8:16:ca:65:2a:d8:07:40:24:1b:97:
1c:89:c1:7a:9f:5f:09:d4:a4:cf:b3:07:05:d1:33:66:a1:96:
78:60:0e:9d:b9:98:fc:a0:0b:a2:7e:81:9d:d0:ce:78:b0:f2:
d4:9b:5f:e4:eb:ea:aa:87:40:c4:08:ca:df:de:de:09:54:fd:
8a:41:2e:54:ac:18:9a:fb:f9:36:dd:89:73:1e:69:13:11:c6:
a8:57:46:4a:bc:30:fb:d8:1b:22:7e:0b:1c:26:0f:21:49:65:
86:c5:7a:6f:6d:6b:6a:4c:57:dd:51:03:49:31:12:d3:02:fd:
a8:17:b6:9d:7f:a6:a5:93:ea:15:53:c7:86:30:9b:1f:27:75:
c3:33:dd:59:54:26:f6:3e:a2:01:18:8d:c9:c6:22:7d:b0:a4:
ee:a2:d3:ba:d2:54:78:42:49:ea:4e:1f:0e:ce:9a:0f:33:3b:
4c:ae:ae:7b:f1:4b:99:0b:bf:ae:ae:8a:10:46:df:ec:7d:ba:
c6:68:c6:82:63:ec:1f:0b:c0:d4:8f:64:2e:45:1e:98:35:05:
a8:63:e8:42:83:0f:bf:7e:af:d6:e6:ce:51:64:20:43:ae:d1:
0b:53:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:42:27 2026 by rpki-client