
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
File: f09e69da-b086-3a26-b789-5a8b5ddee439.roa (raw, json)
Hash identifier: Tx+IEaTQ/gSvwOCtnn79ugiKg9M9EPl3oNZxcsLRkho=
Subject key identifier: 85:2C:E3:93:34:3A:B0:B7:AC:FC:17:25:C2:19:BC:A9:8B:1C:5B:13
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF2E771FB2F5DFDC6D040EE58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 7342
IP address blocks: 2001:502:be98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:71:fb:2f:5d:fd:c6:d0:40:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=6a38a9cc-e336-447c-9029-dbb5a7764007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:b8:65:44:16:e8:51:34:63:09:34:c4:a3:
4a:16:39:20:a7:2e:99:5d:be:dd:24:dd:79:eb:52:
f2:16:cd:1f:ad:d1:d4:e9:00:dd:3e:9f:27:f7:12:
4b:03:46:56:f2:ba:ca:2c:be:f8:b3:0d:20:f0:c9:
48:6d:d3:f4:83:ea:01:fc:a8:91:99:67:0d:60:79:
9f:24:ca:8a:e0:3c:94:07:eb:b0:32:fa:c7:62:4d:
52:43:18:e7:40:4b:20:df:2f:5f:40:47:12:e7:fa:
88:42:65:7c:af:0d:f4:cf:86:a4:2d:d8:3f:c3:76:
09:c9:37:17:86:ae:d5:ac:e0:2d:16:83:b9:5c:d6:
af:4d:1a:2b:71:cf:9d:7f:a7:34:56:c0:00:af:a5:
5e:12:db:83:50:1b:30:52:14:98:69:78:ae:6a:2b:
5f:9c:b3:c2:f6:e2:0a:46:88:71:72:7b:eb:99:b9:
a7:b5:e8:be:f3:95:c6:c2:30:86:9a:bf:46:f7:f7:
f0:6c:77:27:ed:6e:a8:7c:71:8c:2f:1b:96:13:f5:
47:b0:1e:fc:27:9e:c3:9f:7e:4d:ac:5f:5e:04:86:
bf:29:b6:78:84:e6:dd:89:8b:fc:25:ee:1d:c7:11:
2d:77:33:b9:74:e5:e4:ee:85:7f:87:3d:8a:3a:d1:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:E3:93:34:3A:B0:B7:AC:FC:17:25:C2:19:BC:A9:8B:1C:5B:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:be98::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:56:3f:05:43:18:96:09:02:fb:99:7a:97:43:23:26:db:ec:
6d:3a:10:63:73:56:8d:e6:14:f9:66:a3:a8:66:c2:2d:a0:95:
b1:a1:40:c6:9f:32:fa:4f:e2:85:31:3b:73:0d:66:18:c6:77:
2a:f5:b6:ae:41:93:2d:bd:e9:2d:5c:26:32:94:c4:96:b7:7c:
3a:7f:b9:08:a4:cb:6a:7f:07:33:e9:d7:c4:67:03:60:94:41:
f6:25:2f:03:99:83:b6:54:fd:46:cd:c5:d8:40:81:b2:5f:ea:
63:9b:ef:80:d0:cb:ac:00:34:48:74:45:01:dd:30:12:fd:ee:
d1:a7:f7:ce:2d:2c:85:58:78:e8:77:9d:ea:52:77:00:d5:2b:
a5:43:65:b4:66:2d:e9:10:99:f3:d9:da:37:35:f8:4a:ad:07:
10:8a:f9:d8:50:a3:e1:c7:cd:0b:b2:50:9a:df:f5:0f:67:76:
22:80:6a:e2:e7:ff:23:dd:e7:5c:73:ad:9a:90:fa:52:41:fc:
1e:d1:b7:cd:3e:28:30:3a:e7:7b:40:90:da:94:2e:18:23:5f:
d0:ec:b3:a2:cc:c3:e9:72:a2:98:dc:d9:c2:1c:e6:57:67:2b:
07:90:4e:04:78:86:b6:01:54:83:62:06:96:a4:1e:a5:fb:ea:
88:10:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:31 2026 by rpki-client